Protect your removable storage and printers with Microsoft Defender for Endpoint

Dear colleagues,

I could solve my issue with the printer protection policy profile into intune because I used a wrong syntax from the Microsoft documentation:

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/printer-protection?view=o365-worldwide

I figured out that the Microsoft documentation about the printer protection had some issues.

Microsoft have forgotten to add an slash / into the <enabled> tag. So I have copied and paste following wrong property example:

<enabled><data id="ApprovedUsbPrintDevices_List" value="03F0/0853,0351/0872"/>

With that wrong <enabled> tag, I got an Error on Intune.

The correct one is following: 

<enabled/><data id="ApprovedUsbPrintDevices_List" value="03F0/0853,0351/0872"/>

I have added an slash / at the end of the enabled tag: <enabled/> and the Error was gone away and my printer policy works.

I hope that hint helps you not to run in the same Error that I got as I created this intune policy with the wrong <enabled> tag.