Forum Discussion

CoreyOli's avatar
CoreyOli
Copper Contributor
Mar 17, 2026

ASR Device Control Printing Restrictions Issue.... (blocking unapproved USB Printers)

Good morning,

 

I have a really odd issue that I can't seem to wrap my head around.  I have a test ASR Device Control config setup, I have it set to default deny enforcement, I have 4 reusable settings:

1.) Allowed USB Printers (in here I have 3 entries with vid_pid)

2.) Allowed Corporate Printers (I have corporate, network, and file here)

3.) Allow Removable Storage

4.) Block USB printers (nothing else, I did try a * in VID_PID for kicks and giggles)

 

With default deny if I added just reusable settings 2 and 3 everything works, all USB printers are blocked, corporate printers work, and removable storage works.

However, as soon as I add reusable setting #1, it seems to allow ALLL USB printers, it isn't allowing just the VID_PID's I have listed in there, I even tried adding reusable setting #4 to the end (with Deny), same result...

I can't understand why adding an allow for a reusable setting with explicit VID_PID's entered, it is allowing all USB printers...

 

Any help would be greatly appreciate!

 

Thanks,

-Corey

Device control
Intune

1 Reply

  • CoreyOli's avatar
    CoreyOli
    Copper Contributor
    Mar 17, 2026

    I was finally able to resolve this..  Was a twofold issue, I didn't have the reusable settings set to match all and also I tried to put multiple whitelisted printers into the same reusable setting, which was causing issues...

     

    Long story short, each whitelisted item has it's own reusable setting and it's own entry within the device control rule and the all are set to match ALL and there is a block rule at the end to wrap it all up..