Jump to content

Recommended Posts

Posted

We found some USB drive block in ESET Endpoint Security version V11.1.2039.2 [Policy was allow devices]

But. I try rollback to ESET Endpoint Security version 11.0.2044.0 can use it. 

Device log 

<?xml version="1.0" encoding="utf-8" ?>
<ESET>
  <LOG>
    <RECORD>
      <COLUMN NAME="Time">8/8/2024 10:57:08 PM</COLUMN>
      <COLUMN NAME="Device">Disk storage</COLUMN>
      <COLUMN NAME="User">NT AUTHORITY\LOCAL SERVICE</COLUMN>
      <COLUMN NAME="User SID">S-1-5-19</COLUMN>
      <COLUMN NAME="Group">NT AUTHORITY\LOCAL SERVICE</COLUMN>
      <COLUMN NAME="Group SID">S-1-5-19</COLUMN>
      <COLUMN NAME="Status">Blocked</COLUMN>
      <COLUMN NAME="Device details">Vendor: USB, Model: SanDisk 3.2Gen1, Version: 1.00, Serial number: 0101c0592d8a1050ea81152a6fd5c49b7d0a5f8ad3b9760243fa57c6fbc182d5cd640000000000000000000050c69887ff852d009155810788a979d0, Media size: 61525094400</COLUMN>
      <COLUMN NAME="Event details">read attributes;\Device\HarddiskVolume12\DCIM</COLUMN>
    </RECORD>
 </LOG>
</ESET>

  • Administrators
Posted

Please carry on as follows:

  1. Enable advanced logging under Help and support -> Technical support
  2. Attach the USB drive
  3. Stop logging
  4. Collect logs with ESET Log Collector and upload the generated archive here (only the ESET staff can access attachments).
  • Marcos changed the title to Some USB from allow policy cannot use
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...