Scanner shows as "Unknow Device"

%3CLINGO-SUB%20id%3D%22lingo-sub-3060851%22%20slang%3D%22en-US%22%3EScanner%20shows%20as%20%22Unknow%20Device%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3060851%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20are%20currently%20running%20Windows%20365%20Enterprise%20with%20the%20Windows%20365%20Security%20Baseline%20(preview)%20November%202021%20version%20and%20when%20we%20try%20to%20use%20USB%20attached%20scanners%2C%20we%20are%20unable%20to%20connect%20to%20them%20from%20our%20Cloud%20PC's%20(Windows%2010%20or%20Windows11).%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3EAt%20this%20point%20we're%20not%26nbsp%3B%20doing%20any%20USB%20setting%20configs%20via%20GPO.%20I'm%20wondering%20if%20a%20GPO%20is%20needed%20or%20if%20there%20are%20settings%20in%20the%20security%20baseline%20that%20need%20to%20be%20adjusted.%20Right%20now%20I%20have%20set%20the%20Device%20Installation%20-%26gt%3B%20%22Block%20hardware%20device%20installation%20by%20setup%20class%22%20setting%20to%20No%20(just%20set%20that%20this%20morning%20so%20there%20may%20be%20a%20delay%20with%20propagation)%20and%20the%20DMS%20Guard%20-%26gt%3B%20%22Enumeration%20of%20external%20devices%20incompatible%20with%20Kernel%20DMA%20Protection%22%20option%20set%20to%20Block%20All.%20Not%20sure%20what%20DMA%20protection%20is%2C%20but%20see%20that%20the%20option%20is%20%22On%22%20on%20my%20laptop%20and%20%22Off%22%20on%20my%20Cloud%20PC.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance%20for%20any%20pointers!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3060851%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eenterprise%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Occasional Contributor

We are currently running Windows 365 Enterprise with the Windows 365 Security Baseline (preview) November 2021 version in MEM and when we try to use USB attached scanners, we are unable to connect to them from our Cloud PC's (Windows 10 or Windows11). 

At this point we're not  doing any USB setting configs via GPO. I'm wondering if a GPO is needed or if there are settings in the security baseline that need to be adjusted. Right now I have set the Device Installation -> "Block hardware device installation by setup class" setting to No (just set that this morning so there may be a delay with propagation) and the DMA Guard -> "Enumeration of external devices incompatible with Kernel DMA Protection" option set to Block All. Not sure what DMA protection is, but see that the option is "On" on my laptop and "Off" on my Cloud PC.

 

Thanks in advance for any pointers!

1 Reply
Does it work without the W365 security baseline applied?