Intune - Restriction Policy

karthik palani 1,016 Reputation points
2023-10-24T06:18:06.87+00:00

Hi All,

I am trying to achieve the below tasks in Intune, could you please suggest as per your expertise

  1. I want to block Flash drive but not CD/DVD/Printer/Projector etc.. Is there any policy available out of box
  2. I have downloaded Intune company portal offline which is bundled in appx file in which i created it under line of business and deployed. Is this correct procedure to deploy it. Kindly suggest
Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
351 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,749 questions
Microsoft Intune Application management
Microsoft Intune Application management
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Application management: The process of creating, configuring, managing, and monitoring applications.
894 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,472 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Crystal-MSFT 44,406 Reputation points Microsoft Vendor
    2023-10-24T07:15:46.1333333+00:00

    @karthik palani, Thanks for posting in Q&A.

    For your first question, you can use Administrative Templates (ADMX) templates to configure settings to block specific types of USB devices, such as USB flash drives, while allowing other devices like CD/DVD/Printer/Projector. You can create an ADMX policy with USB settings in the Intune admin center and deploy this policy to your Windows devices. For more information on Administrative Templates, and what they are, see Use Windows 10/11 templates to configure group policy settings in Microsoft Intune.

    For your second question, I would confirm why we want to install offline Intune company portal app. In General, some device enrollment will install company portal automatically. Also, for windows device, we can also deploy this app via Microsoft store new app via Intune which can update automatically if new update available..

    https://learn.microsoft.com/en-us/mem/intune/apps/store-apps-company-portal-autopilot

    Hope the above information can help.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.