In some organization , IT policies may restrict the use of the ClickShare Button by blocking the USB ports on laptops, preventing the button from being recognized by the operating system.
The process to remove the USB block so that the Clickshare Button is recognized is unique to your organization and will need to be customized. This is a general guideline.
It is stressed this is not a verbatim process, each company may have its unique process - the local group policy can be over-ridden by Active Directory Policy.
For a more comprehensive guide, please refer to the following resources:
- Controlling USB Devices with Intune
- Restricting USB Devices with Intune
For a more comprehensive guide, please refer to the following resources:
- Controlling USB Devices with Intune
- Restricting USB Devices with Intune
Step 1: Find the Button hardware values needed to whitelist
- Plug the Clickshare Button into a laptop which with no USB Port blocks.
- Press Window + R Key to open the RUN command and type devmgmt.msc
- Get Clickshare Hardware Id Values from any of the highlighted locations shown in the image below.
Optionally the ID can be obtained with this PowerShell script (copy/paste):
param($computerName = "localhost")
Get-WmiObject Win32_USBControllerDevice -ComputerName $ComputerName
-Impersonation Impersonate -Authentication PacketPrivacy |
Foreach-Object { [Wmi]$_.Dependent } | ? name -Match 'button' - The Clickshare Button hardware value can be extracted.
Step 2: Block all USB ports via GPO
Initially, you should block all USB devices not certified by the IT department
- Right-click on desktop > click on New > click on Shortcut.
- Type gpedit.msc > press Next >Create the name of Shortcut as gpedit and click Finish.
- Right-click the shortcut and select Run as Administrator.
- Click on Administrative Templates > click on System > click on Device Installation > open Device installation Restrictions > click on Prevent Installation of devices not described by other policy settings.
A new dialogue box opens.
- Select Enabled, apply the Settings, and click OK.
- Now the policy must be activated. Press the Window + R key to open the RUN command and type gpupdate /force /boot/logoff.
Step 3: Finally we can whitelist the Clickshare Button with GPO
Open Group Policy as before with Administrative rights (step 2b).
- Click on Administrative Templates > click on System > click on Device Installation > open Device installation Restrictions > click on Allow installation of devices that match any of these device IDs
A new dialogue box opens.
- Add Clickshare white values we discovered in step 1d.
- Example: Button whitelist values (get yours from step 1d)
- USB\VID_0600&PID_009F
- USB\VID_0600&PID_009F&MI_04
- USB\VID_0600&PID_009F&MI_00
- USB\VID_0600&PID_009F&MI_03
- USB\VID_0600&PID_009F&MI_01
- USB\VID_0600&PID_009F&MI_02
- Barco_ClickShare_0
- MMDEVAPI\AudioEndpoints
- USB\VID_0600&PID_009F&MI_04
- USB\VID_0600&PID_009F&REV_0210&MI_04
- Finally reload the group policy: Press Window + R Key to open the RUN command and type gpupdate /force /boot/logoff.
Summary
The only USB device that will be recognized by the Windows OS is now the Clickshare Button, no other USB device will be recognized.
Addendum
The following information of the Button needs to be whitelisted (this is a label on the Button):
- Buttons with article number R9861006D01 have VID_0600 and PID_0070
- Buttons with article number R9861500D01 have VID_0600 and PID_009f
- Buttons with article number R9861600D01 have VID_0600 and PID_00CE
- Buttons with article number CSBTN004 have VID_0600 and PID_00CE
