By: Laura Arrizza – Product Manager | Microsoft Intune
Intune is excited to announce new device control capabilities that allows greater flexibility for enhanced endpoint security. This feature...
Updated Dec 19, 2023
Version 2.0
Blog Post
3 MIN READ
New device control capabilities to manage removable storage media access in Microsoft Intune
butters yes, just found it (as MS Support didn't reply yet).
https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-policies?view=o365-worldwide&tabs=Removable
Scroll down to the little yellow warning, which should have been on each page of the documentation on top imo:
The https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-antivirus-updates?view=o365-worldwide#february-2024-engine-11240209--platform-418240207 release causes inconsistent results for device control customers who are using removable media policies with disk/device-level access only (masks that are less than or equal to 7). Enforcement might not work as expected. To mitigate this issue, rolling back to the previous version is recommended.
WinClientsGood night.
How are you, I hope you are doing well.
are you still having problems using device control?
I'm trying to use it but I'm having a lot of inconsistency when applying the policy that blocks all usb storage devices, and only releasing authorized usb storages, I'm using user SID and computer SID to create granularity and greater control so that the user can use the usb storage device only on the machine indicated in the computer sid.
Sometimes I need to apply it several times until I get the release on the specific machine and also restart it a few times.
Do you have any suggestions or answers from MS?