Protocols (Regular Profile) : Managing Permissions for Protocols : Access Rights : SMB
  
SMB
Access rights applicable to the SMB protocol:
•Generic: Send/Receive Data - The right to connect to, and browse shared network folders on SMB servers.
•Generic: Incoming Files - The right to download files from SMB servers to the computer running DeviceLock Service, as well as to upload files to shared network folders on that computer.
•Generic: Outgoing Files - The right to upload files from the computer running DeviceLock Service to SMB servers, as well as to download files from shared network folders on that computer.
 
Note:  
•Access rights for the SMB protocol have no effect on the operation of registering shared network printers with computers under the control of the DeviceLock Service. Even if DeviceLock is configured to block data exchange via the SMB protocol, this does not prevent the operating system from downloading the network printer driver. However, in this case DeviceLock will not allow the user to download the network printer driver by hand.
•Access rights for the SMB protocol have no effect on the operation of Group Policy on computers in an Active Directory environment. Even if DeviceLock is configured to block data exchange via the SMB protocol, this does not apply to Group Policy data exchange. Group Policy settings are updated and applied regardless of the access rights for the SMB protocol.