Only Allow Iphone and block rest of the Removable storage media

Question

Hello All,

I currently block all the USBs using the Block all removable media storage class.

However, for some users, we would like them to access iPhones or any other device and block the rest.

I used the System/Device Installation/ Device Installation Restrictions/Allow installation of devices that match any of these Device IDS and used USB\VID_05AC&PID_12A8 as the device id which is Iphones. Added user to a group and used the group as security filtering.

I think block all USB storage is taking precedence even if I try all different methods.

Let me know if there is any other way to resolve this

Answer 1

Hope this helps:

Allow Installation of a Device by Hardware ID

Answer 2

Hello there,

I doubt this cannot be done with native Windwos tools but achievable using some third party tools .

It seems we can block CD, Floppy , Tape drivers and WPD devices as we necessary policies for them. All Removable Storage classes: Deny all access: This policy setting allows you to configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage policy settings. If you enable this policy setting, no access is allowed to any removable storage class. If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes.

-----------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–