Intune - Restriction Policy

Question

Hi All,

I am trying to achieve the below tasks in Intune, could you please suggest as per your expertise

1. I want to block Flash drive but not CD/DVD/Printer/Projector etc.. Is there any policy available out of box
2. I have downloaded Intune company portal offline which is bundled in appx file in which i created it under line of business and deployed. Is this correct procedure to deploy it. Kindly suggest

Answer 1

@karthik palani, Thanks for posting in Q&A.

For your first question, you can use Administrative Templates (ADMX) templates to configure settings to block specific types of USB devices, such as USB flash drives, while allowing other devices like CD/DVD/Printer/Projector. You can create an ADMX policy with USB settings in the Intune admin center and deploy this policy to your Windows devices. For more information on Administrative Templates, and what they are, see Use Windows 10/11 templates to configure group policy settings in Microsoft Intune.

For your second question, I would confirm why we want to install offline Intune company portal app. In General, some device enrollment will install company portal automatically. Also, for windows device, we can also deploy this app via Microsoft store new app via Intune which can update automatically if new update available..

https://learn.microsoft.com/en-us/mem/intune/apps/store-apps-company-portal-autopilot

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.