I am not sure if this is normal or not....but this is what we are seeing:
We apply a computer based configuration which restricts USB and CD-ROM drives. Once applied, this works perfectly.
Later, we decide that this PC should be allowed to have CD-ROM access, so I remove the PC from the configuration used to block access. Then I add the PC to another configuration which explicitely permits CDROM, but still blocks USB (because we do not want to allow USB).
Upon machine reboot the machine still blocks CD-ROM. I check the server, and it shows that the configurations were successfully applied to the PC. So to get around this I do the following:
Uninstall the DC agent from the DC server
Delete the folder C:\Program Files\Desktop Central Agent\
Install the DC agent from the DC server
Once this is done, the modifications to the configurations work great.....the PC can access CD-ROM but not USB.
Is this normal? It seems that we should be able to update/modify computer configurations for SecureUSB without having to uninstall the agent and delete the folders. Note, if we do not delete "C:\Program Files\Desktop Central Agent\" then it still applies the "old" configurations.....