Forum Discussion
Device Control via Endpoint Security > Attack Surface Reduction > Device Control in Intune
Hi, I have spent the last 2 days testing configuring USB Device Control for devices in Intune. I initially used the OMA-URI method that involves manual creation of XML files (Yuck!) managed to ge...
I spent last week trying to complete the exact same steps as you. My custom OMA-URI config profiles apply without a hassle, the minute I try to configure the 'new' Endpoint Security -> Device Control settings I can't apply a policy. I was bashing my head against a wall all last week and finally threw in the towel on Friday evening when I couldn't get a policy to apply.
It's good to know someone else can't apply via the new UI settings. I created reusable settings like you have, left the SID open, and then manually added a SID to see if it would work. Nothing worked in the end.
Sorry, this reply probably isn't the one you were looking for, I just needed to tell you I spent a solid 8-10 hours trying to configure different settings and couldn't get it working. OMA-URIs are the only reliable setting for Device Control at the moment in my eyes.
It's good to know someone else can't apply via the new UI settings. I created reusable settings like you have, left the SID open, and then manually added a SID to see if it would work. Nothing worked in the end.
Sorry, this reply probably isn't the one you were looking for, I just needed to tell you I spent a solid 8-10 hours trying to configure different settings and couldn't get it working. OMA-URIs are the only reliable setting for Device Control at the moment in my eyes.
MS have now confirmed this a known issue internally and it's assigned to engineering for resolution, however as the feature is still in Preview there is no ETA for a fix.
Other people reporting the same issue in the comments in this article:
https://techcommunity.microsoft.com/t5/intune-customer-success/new-device-control-capabilities-to-manage-removable-storage/ba-p/3664726