Blog Post

Microsoft Security Community Blog
7 MIN READ

New capabilities that help proactively secure data with Microsoft Purview Data Loss Prevention

Shilpa_Bothra's avatar
Shilpa_Bothra
Icon for Microsoft rankMicrosoft
Oct 12, 2022
We are witnessing the proliferation of different types of data and access points, coupled with an ever-evolving regulatory landscape, with hybrid work being the new normal. Additionally, the solution...
Updated Oct 25, 2022
Version 3.0
data loss prevention
microsoft purview
miller34mike's avatar
miller34mike
Steel Contributor
Oct 17, 2022

Steven Choy You can achieve that through a custom OMA-URI policy in Intune, if you were not aware. You can read up on it here, this will solve exactly what you're looking to do. It includes setting the default policy to deny, building a list of trusted USB types, setting a specific group to having different access, and some other examples as well.

 

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/deploy-manage-removable-storage-intune?view=o365-worldwide#deploy-removable-storage-access-control-by-using-intune-oma-uri