Blocking USB slots in Intune
Dear Reader,
because of security reasons, I want to block all the USB slots of our clients.
On different websides I was told to go to Intunes – Devices – Windows – Configuration and create a new “GPO” policy by choosing an administrative template called “prevent installation of devices not described….” and include the user group. In a second step I need to exclude all the hardware I do not want to be blocked, like keyboard, mouse….
But after all that doesn´t seem to work.
After waiting a few hours, in hope the test client would drag the “GPO”, I could still use my own USB Stick. (Btw: is there a way to synchronise instead of waiting? Like the old gpupdate /force in cmd? and without the “synchronise” in the company portal?)
After that fail, I did the same in Endpoint security and that works fine. All the USB slots are locked.
So was it just a wrong infromation to do it with a configuration profile?
Where is the difference between configuration profile and endpoint security?
In a next step I want to lock down USB in booting the PC as well. Is that possible?
Thanks a lot for any hint.
Have a nice day.
Hilmar
Dear Reader, because of security reasons, I want to block all the USB slots of our clients.On different websides I was told to go to Intunes – Devices – Windows – Configuration and create a new “GPO” policy by choosing an administrative template called “prevent installation of devices not described….” and include the user group. In a second step I need to exclude all the hardware I do not want to be blocked, like keyboard, mouse…. But after all that doesn´t seem to work.After waiting a few hours, in hope the test client would drag the “GPO”, I could still use my own USB Stick. (Btw: is there a way to synchronise instead of waiting? Like the old gpupdate /force in cmd? and without the “synchronise” in the company portal?) After that fail, I did the same in Endpoint security and that works fine. All the USB slots are locked. So was it just a wrong infromation to do it with a configuration profile? Where is the difference between configuration profile and endpoint security? In a next step I want to lock down USB in booting the PC as well. Is that possible? Thanks a lot for any hint. Have a nice day. Hilmar Read More
