Hi,
I'm trying to block USB on some computers (not all) in a computer group.
We don't want to create a separate active directory OU's and/or give these computers a fixed IP address.
So I created a new location called ethernet-specific and added the Application and Device control policy with block USB to this location.
Created a hostgroup with all the MAC addresses and added a condition to the location ethernet-specific.
It is allowed to create a condition on computers IP address and then add a hostgroup in my case the hostgroup with MAC Addresses.
However the clients are not switching to this location.
They only switch to this loaction when I add for example an condition, based on an IP range to the default or another additional location.
e.g. If client computer has one of the IP addresses listed below then select IP range and make sure the IP address of the computer of which you like to block the USB is not in that range. If you have more computers then multple IP ranges are needed. Down side is that we don't want to create fixed IP addresses.
If we leave the default location blank (no condition) and temporarily add the IP address to the ethernet-specific location. Then wait till the client has switched to this location and remove the IP address again. This way the client won't switch back to the default location but it is tricky and not recommended because it is not a fixed IP address.
Has anyone tried to use location switching based on hostgroup with MAC addresses?
Should this work or is it a bug in SEPM12.1 RU1.
Has anybody a solution to block USB on some computers in the a group preferably on hostname but by registry is also fine?
Thanks
Rogier