DeviceLock DLP: USB flash drives cannot be stopped/safely removed from the system when DeviceLock Service is running

Description

USB flash drives cannot be stopped/safely removed from the system when DeviceLock Service is running.

Comments

The issue indicates that there is a lack of permissions for SYSTEM account for Removable device type.

Recommendations

Add SYSTEM:Full control entry to Removable access control list.