Blocking and unblocking hardware

Jon Mercer 971 Reputation points
2023-08-22T20:01:45.7933333+00:00

For most antivirus programs I have used, if a piece of hardware s blocked, I can find it by searching for the computers name, select it, and say don't block it in that anti-virus profile. Is there a way to do something like that with Endpoint Security ASR or is it all manual entry?

I am building out Defender for Business for implementation and trying to setup hardware restrictions based on who will be part of that group, but so far all I have found is an all/nothing/manually do it one device at a time process.

Microsoft 365
Microsoft 365
Formerly Office 365, is a line of subscription services offered by Microsoft which adds to and includes the Microsoft Office product line.
4,223 questions
Microsoft Defender for Identity
Microsoft Defender for Identity
A Microsoft service that helps protect enterprise hybrid environments from multiple types of advanced, targeted cyberattacks and insider threats.
175 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Fiona Matu 86 Reputation points Microsoft Employee
    2024-01-30T10:14:13.01+00:00

    Hi Jon, Endpoint Security ASR does not block hardware devices but can provide some of the capabilities you're looking for. For instance, you can create device groups then apply different ASR rules to each group which allows you to customize the security settings based on the group's needs. The process of adding devices to a group is not entirely automated, you have to manually add devices to a device group. Read more on creating device groups from this documentation and how to use ASR rules from here.

    A better way of managing hardware restrictions would be using you can using the Device restriction profiles in Intune. Create a device restriction profile with a list of allowed or blocked hardware devices for a group of users. Learn more on creating device restriction profiles for Windows 10/ Windows 11 devices using Intune from this page.

    0 comments