DeviceLock Service : Managing DeviceLock Service for Windows : Security Settings (Regular Profile)
  
Security Settings (Regular Profile)
DeviceLock provides a number of additional security parameters that affect permissions and audit rules for certain device types. These security parameters provide the ability to keep some device types completely locked, but allow the use of certain device classes without the need to authorize every device in the white list. For example, you can disallow the use of all USB devices except any mouse and keyboard devices that connect through the USB. For further details, see Security Settings Description.