Block External HDD and Smart Phones

[urochsw]

Dear all, I have some issues blocking external HDD and Smartphone.

I like to block external hdd, for example Samsung T7, Toshibas, WD, or let's make it all external HDD that can be inserted.

At the same time, I like to block all known Smart Phones.

I did create following

Removable Storage Device Rule, Conditions- used a definition File System Type - Bus Type Equals USB and SCSI - Device Description Equals Disk Drive

PNP Device Rule - Conditions - Plug and Play, Smartphones (built in) and Windows Portable Devices (built in)

This blocks the smartphones and blocks some External HDD, but some External HDD are shown as Fixed Drives some as Removable media when using HDLPDiag.exe this causes an issue.

Also when I have the above settings I have noticed that a rule I had in place for blocking USB devices - all users - an exception if user belongs to a correct AD group (can use USB) now USB´s are blocked as well and Incident Manager complains about the rule I created for Smartphones.

Anybody here who has created rules to block External HDD and Smart Phones that could help me out.

Running the latest version of ePO, DLP endpoint, and agent 

Many thanks in advance