Block USB Drive using Intune

Block USB Drive using Intune

Personnal USB drives linked to work computer systems is a bit dangerous. Anybody may copy necessary stuff off the pc and onto a thumb drive. If that will get into the incorrect arms, it’s not going to look good for the corporate. It’s fairly necessary to place a cease to utilizing these transportable drives on work units. That means, all the key and necessary information stays the place it ought to, preserving the office secure and sound. On this weblog, we’ll describe create an Assault Floor Discount Coverage to dam USB drives utilizing Intune.

Assault Floor Discount Coverage

The best strategy to Intune block USB drive, is to make use of an ASR coverage. Let’s test the steps to dam USB drive entry by creating an Assault Floor Discount (ASR) coverage.

  • Check in to Intune portal
  • Click on on Endpoint safety / Assault floor discount.
  • Click on on Create Coverage

On the subsequent Intune display choose the next choices :

  • Platform: Home windows 10, Home windows 11, and Home windows Server
  • Profile: System Management
  • Click on Create on the backside
Block USB Drive using Intune
  • On the Fundamentals tab, enter Title and Description, Click on on Subsequent.
Block USB Drive using Intune

Configuration settings Tab

That is the place you choose the best coverage to dam you usb drive with Intune. Below the hood, it’s going to triger this CSP Coverage : ./System/Vendor/MSFT/Coverage/Config/Storage/RemovableDiskDenyWriteAccess

  • Scroll all the way down to Storage and choose disabled underneath Detachable Disk Deny Write Entry
  • Click on on Subsequent
Block USB Drive using Intune
  • On the Scope tags display, click on Subsequent


Assign your profile to an Entra safety group containing customers or units. For our take a look at, i’m including a take a look at group.

Intune block USB drive
  • Evaluate the deployment Abstract and click on on Create button when all is configured as you would like
Intune block USB drive

Sync Intune Insurance policies

In your take a look at machine launch a guide sync on the machine or use the Intune portal to retrive the brand new coverage. This course of might take some time to aply. Be affected person.

Intune block USB drive

Intune block USB drive – Monitoring Deployment Progress

To watch the deployment progress of your new USB block System configuration profile :

  • Click on on Endpoint safety / Assault floor discount
  • Select your System Configuration profile
  • Click on on System task standing
  • You see stats on Success, Failure, Battle, Not Relevant, and In Progress standing.
  • Click on on “View report” to entry extra detailed data
Intune block USB drive

Finish-user Expertise

As soon as the coverage has been efficiently utilized on the machine, customers will encounter an Entry is denied message when making an attempt to entry a USB drive. This restriction is a results of the utilized coverage, which prevents the usage of detachable storage.

Intune block USB drive

We use cookies to enable site functionality and collect data about user interactions. By clicking Accept, you agree to our use for advertising, analytics, and support.