Issue: Mouse and keyboard blocked by Ivanti EPS Device Control

Version 11

    Verified Product Versions

    Endpoint Manager 9.6Endpoint Manager 2016.xEndpoint Manager 2017.x


    When trying to block USB storage and allow mouse and keyboard USB, if it is configured in the following manner, the mouse and keyboard will still be blocked.


    • In the Device Control settings on the Interface Tab, USB - Block is configured.
    • In the Device Control settings on the Devices Tab, Keyboard and mouse are configured as "Allow".



    Please see the comment for "Allow" and "Always allow":


    Allow: Device will be allowed over interfaces that are not blocked.

    Always allow: Device will be allowed over all interfaces including those that are blocked.


    If a certain interface is blocked, "Allow" will not work.  "Always allow" allows the device to override the Interface selection of "Block" and the device will be allowed.



    You will need to configure the Mouse and Keyboard to be "Always allowed" instead of "Allowed" due to the USB interface being blocked.