Blocking USB drives but allowing USB Mouse & Keyboard

[AB21805]

Hi all,

Is it possible to block USB drives but allow USB Mouse & Keyboard from intune? 

I cant seem to get it to work. I have tried enabling the below policies, this stops me writing to the USB but doesnt stop me copying files from it to the laptop?

Any ideas? 

[#2]

Hi,

If you have Microsoft Defender for Endpoint licenses you can use the Device Control feature: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/device-control-overview?v...

We have this running with several customers and works perfect. You can also configure this from Intune by the way.

[#3]

But which ones are needed to block all USB Drives but allow Mouse / Keyboard and external CD drives (If possible)

[#4 · Accepted solution]

Hi,
This is what you are looking for:
In Settings Catalog
System > Removable Storage Access
------------------------------------------------------------------------
Removable Disks: Deny read access (User)
Enabled
Removable Disks: Deny write access (User)
Enabled

[#5]

Hi, Some sticks work but most dont. Mouse I tired in the right side of the laptop and it worked but left did not.

The sticks that dont work also dont in the right side

Any ideas?

[#6]

Can you share your configurations so we can have a look

[#7]

This worked on another device think the device was the issue.