Trying to Create a Policy to Block USB on Windows 11 PC using Intunes

Question

I am trying to block USBs on devices in my Organisation. We have a Microsoft 365 E3 License, so I decided to enroll devices and allow users to sign in with their Microsoft 365 Email. I created a policy in Intune.

Endpoint Security > Attack Surface reduction > Windows 10 and Later > Device Control > Administrative Templates > System

See below Diagram

I noticed that because I chose Windows 10 or later it wasn't applied to Windows 11 PC but effective in Windows 10 PC. Please who can help with the right way to implement for Windows 11 PC

Answer 1

@Ogunbolude Dotun, Thanks for posting in Q&A.

Based on my researching, the policy "Prevent installation of removable devices" can work on both Windows 10 and Windows 11.

https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb

https://www.thewindowsclub.com/how-to-prevent-installation-of-removable-devices-on-windows-10

Note: Non-microsoft link, just for the reference.

You can deploy the same policy to Windows 11. Hope the information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.