Block removeable usb storage via Intune

Question

Hello,

I searched a lot and find a policy here Endpoint security >> Attack surface reduction>> device control.

Previously there was a option to block usb storage like follwoing picture. Unfortunately, there isn't this option anymore.

So, how can I block just removeable usb storage?
There are some options but each of them has a specific problem.
for example:
Prevent installation of removeable devices:
This option will allow laptop to recognize usb storage that has connected before to the laptop. It just prevent new usb storage to connect.

It would be great if you could help me in this regard
Thank you@

Answer 1

It appears the way this is accomplished has changed.

1. In Endpoint Manager go to Endpoint security > Attack surface reduction > Create Policy
2. Platform: Windows 10 and later, Profile: Device control, then Create
3. Give it a name and description
4. Scroll down and locate the Storage section and enable Removable Disk Deny Write Access
5. Use Scope tags or assign to required groups/users

---

Please accept as an answer if this was helpful.

Answer 2

Hi

I've tried these settings but can still access USB storage devices.

Answer 3

Bonjour,
Pour ma part j'utilise ceci pour bloquer les clés USB.
et des stratégies pour en autoriser certaines pour la finance

Answer 4

I tried the same and USB devices are accessible only write access from the device to the USB is blocked

Answer 5

I'm dealing with the same issue. If you know how to block USB storage devices using Intune, please inform me. We have a Microsoft Business Premium license.

Thank you in advance

Qais