Topic: «Access denied errors on USB composite devices»
Second question: We use several HP Deskjet H470 portable printers in our environment, which plug into DeviceLock-protected laptops via USB. In addition to be standard USB printers, they also have a built-in card reader. As such, they present themselves to DeviceLock as a USB Composite Device, and do not properly respond to the Access Control setting for USB printers (because they are composite devices, and not just printers).
To get around this, we have whitelisted the composite device ID, which in turn allows users to print to the printers. However, when the user first plugs the printer in, they receive an 'Access Denied' message for the composite device, presumably because of the presence of the card reader. (Windows creates a disk drive for the card reader even when a media card is not present in the reader.) However, they receive this message regardless of whether or not there are any media cards loaded into the card reader.
For the record, our Access Control is Disabled for USB printers and Enabled for USB storage devices.
Is there a way to suppress this 'access denied' message for the composite device while still preventing users from reading or writing data from the printer's built-in card reader?
|Posted: 09/25/2008 19:00:12|
|You should try to whitelist the whole device but resctrict access at the level of Removable drives.|
|Posted: 09/26/2008 18:16:17|
|Roman is correct...and make sure that "Control As Type" is checked/on for the whitelist assignment setting for that composite printer.|
|Posted: 11/05/2008 02:58:58|