Symantec endpoint manager disable usb policy