Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 657 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Device Control Notifications

DCarey

Am using using Sav EC 4.7.013 and we're getting loads of device control email messages such as the one below. 

Message - Device control successfully restarted device: deviceId=IDE\CDROMTSSTCORP_DVD+-RW_TS-U633F_______________D500____\4&2F64C4DE&0&0.1.0.

I want to exempt these from monitoring.  However when i go int the Device control event viewer i only seem to be able to exempt 'Removable Storage' devices and it doesn't show any Optical ones that i can then exclude. 

Does anyone else know if there are any other locaions where i should be looking to exclude these.

Thanks in advance.

:13955


This thread was automatically locked due to age.
  • 0

    Hello DCarey,

    I assume you are not blocking Optical Drives and you have set up email alerting in your policy.

    What happens is that DevCtrl does "touch" the devices even if you specify full access, and whenever it encounters an error (do you also get failed to enable or disable messages?) you get a (useless) email. I'm not sure if exempting a device would suppress these errors at all but even if the process would be tedious as you'd have to exempt each of the usually various models.

    I guess this would require some changes. The simplest solution would be an option to select which kind of alerts are sent by email or to the console (similar to the AV policy).

    Christian

    :14013