Is there any way to block windows 10/11 device DVDs using Intune policy

Question

We want to block builtin dvd using Intune policy

Answer 1

@Md Nasir Uddin , Thanks for posting in Q&A. Based on my researching, I find we can create registry key in the following link to block DVD. You can firstly test on one device to see if it can work.

https://www.top-password.com/blog/block-read-write-access-to-usb-or-cd-drive-in-windows-10-8-7/

Note: Non-Microsoft link, just for the reference.

If it works, we can write PowerShell script to create the registry key and deploy it via Intune.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

I saw some Administrative Template options under the device configurations. I configured them but they dont seem to be working. I did something similar with attack surface reduction option. Same....

I can attach CD/DVD on a VM and nothing is blocked.

Did you find a solution for this?