How to disable USB hard drives via policy in Intune and defender as well for devices but keep mouse, keyboard and audio classes open for those devices?

Vinod Survase 4,716

How to disable USB hard drives via policy in Intune and defender as well for devices but keep mouse, keyboard and audio classes open for those devices? Want to disable for all below OS's Windows macOS Android iOS/iPadOS

1 answer

Reza-Ameri 16,856 Reputation points

2023-04-05T16:36:19.59+00:00

You could do it using policy in the Intune and you have to set like block all and put exception like adding device ID for permitted device and block others. Have a look at: https://video2.skills-academy.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb As for the Microsoft Defender for Endpoint , have a look at: https://video2.skills-academy.com/en-us/microsoft-365/security/defender-endpoint/device-control-removable-storage-protection
Please sign in to rate this answer.

1 person found this answer helpful.
Vinod Survase 4,716 Reputation points

2023-04-06T06:50:07.21+00:00

Thanks for answer on this @Reza-Ameri

Vinod Survase 4,716 Reputation points

2023-04-06T06:54:35.73+00:00

@Reza-Ameri Do we need to create both policies from Intune and M365 defender for endpoint or only one from Intune? Can you confirm on this?

Reza-Ameri 16,856 Reputation points

2023-04-07T14:09:10.5+00:00

Welcome, you may create in either of them, but it is better to try for example create a basic policy in Intune and see if it works as expected?

Vinod Survase 4,716 Reputation points

2023-04-07T17:39:40.2666667+00:00

Thanks @Reza-Ameri Are there any recommendations for this to implement or create a policy?
Sign in to comment

Share via

How to disable USB hard drives via policy in Intune and defender as well for devices but keep mouse, keyboard and audio classes open for those devices?

1 answer