Forum Discussion

AhmedSHMK's avatar
AhmedSHMK
Brass Contributor
Jun 04, 2024

Block USB with Intune

We have configured attack surface reduction rule to block USB.

It works on one device but not the others therefore I assume no issue with the policy, Main config is as following(Removable Disk Deny Write Access: enabled), The rest is pretty much not configured.

 

-I am just wondering what events in event viewer could be checked?

-What could be a cause for the issue?

-Any known causes/issues?

 

 

 

Intune
Mobile Device Management (MDM)
  • AhmedSHMK's avatar
    AhmedSHMK
    Brass Contributor
    Jun 04, 2024
    From MDM diagnostic report(same in working and non working devices):

    Storage RemovableDiskDenyWriteAccess 0 1 device 83AF4780-92A8-44A1-9EFD-63B38B2173C6=1

Resources