Hello,

I wanted to know anyone has been able to white list/control what USB devices can or cant be used on a XP workstation? We are using GPO for managing the Windows 7 and 8 workstations. 

Is there a way we can get SCCM to monitor / enforce this on XP clients? Is there anything we can use?

This is not done natively with SCCM. Third party tools are required. A colleague of mine has implemented this although I have no first-hand experience of it.

http://www.lumension.com/Press---Events/Press-Releases/Lumension-Extends-its-Leading-Device-Control-Solut.as

Cheers Gerry,

Yeah, Ive seen this before, it doesn't integrate with SCCM, its a standalone product, I called the sales team and spoke to them about it, they were even 

Can I assume that the only way forward with this requirement is to go to a third party application?

Unfortunately that's right Heinrich. It's not a feature of SCCM and can only be implemented with a third p

We are using Symantec EndPoint v11.6xxx for our device whitelisting.  Only encrypted USB keys can actually be written to.  Non-encrypted keys can be read from or blocked altogether.

Yes, I think this is a better option moving forward.

Group Policy has this ability although it wasn't full-featured with XP -- you do know XP will no longer be supported at all past April 2014 though correct?