Overview

USB Management in zMan Director allows administrators to control USB device access on managed zTC endpoints.

This feature provides options to allow or block USB devices and manage access by USB device class or specific device ID.

---

USB Device Control

USB Management can be used to define which USB devices are allowed or blocked on managed zTC devices.

Administrators can use this feature to help enforce endpoint security policies and reduce unauthorized peripheral access.

---

Supported USB Device Classes

USB Management supports control of USB device classes such as:

• Audio
• Video
• Printer
• Image
• Mass Storage
• Smart Card

These classes allow administrators to manage USB access by device category instead of relying only on individual device entries.

---

Special Device Handling

For special devices such as card readers or specialized printers, administrators can enter specific device IDs to allow or block those devices.

This is useful when an organization needs to permit specific approved peripherals while blocking other USB devices in the same general category.

---

Applying USB Management Policies

After a USB management group or policy is created, it can be applied to the required managed devices.

USB Management policies may be applied to:

• Individual zTC devices
• Groups of zTC devices

---

Common Use Cases

USB Management may be used to:

• Block USB mass storage devices
• Allow approved smart card readers
• Restrict unauthorized peripherals
• Permit approved printers or specialized USB devices
• Apply different USB policies by department or device group

---

Notes

• USB policy behavior may depend on the connected device class and device ID.
• Special devices may require the correct device ID before they can be allowed or blocked.
• USB Management settings should be tested before being applied broadly across production devices.
• Available USB controls may vary depending on device firmware and deployment configuration.