How to allow specific vender's removable device to write access and the others deny all using Intune profile on macOS?

Question

Hello,

I saw your guide but I couldn't find any whitelist policy about removable device control on macOS.

It's not supported yet?

I want some vendor's usb allow write access but the others all deny write access.

Please give me a advice, thank you.

I already read guide and tried all.

[https://learn.microsoft.com/ko-kr/microsoft-365/security/defender-endpoint/mac-device-control-intune?view=o365-worldwide]

[https://learn.microsoft.com/ko-kr/microsoft-365/security/defender-endpoint/mac-device-control-overview?view=o365-worldwide#look-up-device-identifiers]

Answer 1

Hi,

Thanks for your reply.

For MacOS, we can refer to below article:

Block all USB/External Storage Drives on Mac, Windows workstations with Microsoft Endpoint Manager

Best regards,

Simon

Answer 2

Hi,

Thanks for posting in Microsoft forum.

You can refer to below official article to have a try:

Scenario 1: Prevent Write and Execute access to all but allow specific approved USBs

Thanks for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.