ManageEngine Device Control Plus

The ability to manage what USB devices we allow to be accessed when inserted into one of our machines. This has stopped users using memory sticks which haven't been checked over by ourselves in IT, to ensure the stick hasn't been given to them from a third party and then plugged into our machines which could affect our network. However with our specific memory sticks, it allows us to be sure what is given out is secure. Also the ability to control what type of device is allowed - microphones, webcams, mice and keyboards etc. This has allowed us to stop users being able to access their mobile phone storage SD cards, however keeping the charging function when plugged in.

It would have been great to have a list of devices which we could add to the blacklist, prior to making the policy live. This would allow us to allow all specific types of devices except X, Y and Z. Otherwise it needs to be set as block all, and then the user can request for their device to be whitelisted. Or when a device is plugged in, the software then detects that piece of hardware and adds it to the list. Even if it was a default list of many different vendors.