Alexlsx86

I already had those on replace. So, it doesn't look like i can actually see the ACTUAL rule that's being applied in the logs then, just that its either blocking or allowing and which device?

I had it on warning, I turned it onto diagnostic to see if it would show up, which it didn't. It doesn't show on either. So if the rule meets a condition, it won't move down to the next rule at all? It will stop there? Where is the setting in the policy in eset protect to change the append or prepend rules (sorry, not anywhere near a computer ATM) Maybe that's something I need to change too...

No, i do have that. I am blocking and allowing using Device Groups per Group of users. Some users have more devices that need allowing, like our Accounts department. So i want to see which rule/device groups are blocked, not single devices like 'Disk Storage', as i cant tell if for example; "Accounts Devices Allow" Rule is working or "Block All Devices" Rule is taking over At the moment, no devices are working in the Accounts group when i set user or group permissions, but if i remove them, and have it on allow all (blank), they are allowed but everything else is blocked as per my "Block All Devices" rule. This is no good, because it means everyone can use the devices in that current rule. BUT I cant tell which rule is working or not by it just saying 'Allowed' or 'Blocked' and the 'Device', because i also have other rules in place, other than the ones mentioned. I hope that makes sense as i feel like i struggled to explain it properly, it seems more complicated than it should be but im not doing anything crazy, i'd assume its a fairly basic setup. Screenshots below- Accounts Device Group This rule has users assigned to it, i also tried the same users in a group, neither worked. This is exactly the same rule, but no users assigned (blank) and it works This rule blocks everything for all users and is at the bottom of the list. User list is empty, works fine.

Yes, and its not there that i can see... I have looked on the users machine and enabled diagnostic logs and pulled them to the server, neither of them show it.

Is there anyway to see in the logs which rule is blocking or allowing devices? I am having difficulty troubleshooting Device Control as it seems to be quite temperamental. I had it all working fine after some issues with it, which were resolved by recreating the rules exactly the same as before. We have now rolled ESET out with a few different rules but when trying to add a new device, it doesn't seem to be getting allowed. I don't want to have to delete it and recreate it every time, so I am wondering if I can see in then logs which rule is being activated, so I can make sure its not conflicting with another one.

Yeah I've tried everything. I have it working now. I deleted my rule and recreated it, which seemed to resolve it! I've tried both neither worked, same for asterisk or no asterisk. I got it working by deleting and recreating the rule.

Hi, We are planning on replacing our old AV with ESET for various reasons and testing has gone well up until this point. For some reason, I cant get device control working, no matter what I try. I have it set to block everything for all users, have tried adding a user group and single users, wildcards, no wildcards. Nothing seems to work and i cant see anything in the logs on the users Device. Am i doing something completely wrong? I have tested multiple devices - A foot pedal, some headphones and a USB drive. I have attached a screenshot of the current settings.