Forum Discussion
Solved
Blocking USB drives but allowing USB Mouse & Keyboard
Hi all,
Is it possible to block USB drives but allow USB Mouse & Keyboard from intune?
I cant seem to get it to work. I have tried enabling the below policies, this stops me writing to the USB but doesnt stop me copying files from it to the laptop?
Any ideas?
- Hi,
This is what you are looking for:
In Settings Catalog
System > Removable Storage Access
------------------------------------------------------------------------
Removable Disks: Deny read access (User)
Enabled
Removable Disks: Deny write access (User)
Enabled
6 Replies
- Hi,
If you have Microsoft Defender for Endpoint licenses you can use the Device Control feature: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-overview?view=o365-worldwide&tabs=Removable
We have this running with several customers and works perfect. You can also configure this from Intune by the way.- But which ones are needed to block all USB Drives but allow Mouse / Keyboard and external CD drives (If possible)
- Hi,
This is what you are looking for:
In Settings Catalog
System > Removable Storage Access
------------------------------------------------------------------------
Removable Disks: Deny read access (User)
Enabled
Removable Disks: Deny write access (User)
Enabled
