Bluetooth

Using the settings for connecting devices via Bluetooth, you can, for example, prevent pairings with new devices or configure restrictions to desired Bluetooth services from DriveLock version 2021.1.

Concrete use case: You want to control the use of some Bluetooth devices (e.g. mouse, keyboard or Microsoft Surface Pen). The use of these devices should be allowed, but all other Bluetooth devices (including their functions such as file transfer) should be blocked.

In the DriveLock Management Console, open the Devices node and select the Bluetooth sub-node in the Lock Settings.

The following settings are available here: By default, they are disabled.

• Block Bluetooth advertising

  Select this option if you want the device to be the source of Bluetooth announcements and be discoverable by other devices.

• Block Bluetooth discoverability

  Use this setting to specify whether the device should be detectable by other Bluetooth devices, e.g. a headset.

• Block Bluetooth pre-pairing

  Select this option if you want certain bundled Bluetooth peripherals to automatically pair with the host device.

• Block Bluetooth proximal connections

  This option prevents users from using fast pairing and other short-range technologies.

• Allowed Bluetooth services

  This setting lets you enter allowed Bluetooth services and profiles in a list (using strings in hexadecimal format).

  Further information on Bluetooth services can be found at Microsoft under the following link.

It is recommended when making changes in this area to first apply the changed policy to the agent and then restart the machine. This is especially true if the list of allowed Bluetooth services has been edited.