we are using DesktopCentral for over two months now and are very happy with software and patch deployment.

Now we want to use the usb security feature to do the following:

1. Block all devices except mouse on (most of) all clients.

2. Unblock specific devices for specific users.

3. Notify users when they attach a usb drive (unallowed).

4. Receive an email alert about the unallowed action.

I tried deploying the configurations on the clients and have encountered many problems...

1.) On my own client I set up a configuration to block everything but mouse, set it to apply every startup. After many reboots I a still able to attach USB drives - there are no other usb configuration which might allow it. There is only one, it gets deployed but doensn't do anything...

2.) On a notebook I was able to deploy the same configuration. Here the blocking works fine!

BUT: The user does not always get an notification when I enter a USB drive; I also do not get an email alert about the action I just did.

SOMEtimes after a reboot and logging in I see an notification about the DVD drive as blocked, but not the usb drives (they are blocked but not mentioned!).....

3.) I wanted to remove the restrictions on the notebook. So I entered the config (for blocking), saved it as draft (=no more actions) and added a new config to "revoke all restrictions". This did not work, even after many reboots! The devices are still blocked.

Then I saw in dcconfigaccess.log that the old config (which is saved as draft!) is still getting deployed every reboot! This should be impossible!

The I moved it to trash but still the config gets deployed! This should be totally impossible!

I deleted the config from trash - and....it still gets deployed every reboot! This should be super-mega-impossible....

The new config to revoke all restrictions newer worked either!

I finally got al least this thing to work by making again a new config and set all devices to "allow". THIS worked! But why didn revoking all restrictions NOT work?

I am very disappointed of the USB block feature right now, I don't know if I can trust the feature to work properly...

How are other experiences i ncompanies??