View History of External Device Connection Attempts
- Click 'Security Sub-Systems' > 'Device Control' to view all connection attempts from external devices to your Windows endpoints
- Endpoint Manager can create a log entry when an external device attempts to connect to a Windows endpoint. External devices include USB devices, DVD drives, printers, Bluetooth devices etc.
- These logs are created
when the Windows profile contains the 'External Devices Control'
section. See External
Devices Control Settings for more details.
- You can also generate a report of external device connection attempts.
View a history of device connections:
- Click
'Security Sub-Systems' > 'Device Control'
|
Device Control - Column Descriptions |
|
|---|---|
|
Column Header |
Description |
|
Hardware Name |
Displays the name of the external device which attempted to connect to a managed Windows device. |
|
Date Detected |
The date and time at which the device was first detected. |
|
Hardware Class |
The Globally Unique Identifier (GUID) of the device class which attempted to connect. |
|
Hardware Path |
The Device Instance Identifier of the external device which attempted to connect. |
|
Host Device |
The name of the Windows device to which the connection attempt was made. This column also shows the host's current connection status (connected or removed) |
|
Status |
Indicates whether the connection was allowed or blocked. This depends on the settings in the 'External Devices Control' section of the profile active on the host device. |
Sorting, Search and Filter Options
- Click any of the 'Hardware Name', 'Hardware Class', 'Host Device' or 'Status' column headers to sort the items based on alphabetical order of entries in that column.
- Click the funnel button
at the right end to filter the items based on device name, hardware class, hardware path, host, status and/or detection date.
- Enter the search criteria in the respective field and click 'Apply'.
- To display all the items again, remove / deselect the search key from filter and click 'OK'.
- EM returns 20 results per page when you perform a search. To increase the number of results displayed per page up to 200, click the arrow next to 'Results per page' drop-down.
- Use the left and right arrows and the page numbers at the bottom to navigate to the page you want to view.
Generate a report containing log of device connection attempts
- Click 'Security Sub-Systems' > 'Containment'
- Click
the funnel icon
to apply filters to the report.
- Click the 'Export' button and choose 'Export to CSV':
The report will be generated in .csv file format.
The report can be accessed in the 'Dashboard' > 'Reports' interface. See Reports in The Dashboard if you need more help with this interface.