How to exclude the USB-C docking station/charging and other input and output devices like keyboard, mouse and external display etc. blocked by USB block policy via Intune and how to exclude in those policies ?

Question

How to exclude the USB-C docking station/charging and other input and output devices like keyboard, mouse and external display etc. blocked by USB block policy via Intune and how to exclude in those policies ?

Vinod Survase 4,781

1 answer

Your answer

Answer 1

ZhoumingDuan-MSFT 17,165 Microsoft External Staff

@Vinod Survase,Thanks for posting in Q&A.

From your description, I know you want to exclude some Intune policies.

Based on my researching, you can create a filter following the filter rule syntax in the link below, find the policies and in Assignment page add the filter, then the devices in filter will be excluded from the policy.

https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters

User's image

Hoe above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Vinod Survase 4,781 Reputation points

2024-02-01T10:43:29.8466667+00:00

Hi ZhoumingDuan-MSFT, I wanted to exclude the USB-C, Input and Output type of devices classes from the USB Block policy and the way you mentioned is part of device exclusion so it wont work for me. Let me know if you did not understand my requirement.
ZhoumingDuan-MSFT 17,165 Reputation points Microsoft External Staff

2024-02-02T05:29:37.15+00:00

@Vinod Survase,Sorry for the misunderstanding.

If you want to exclude some devices classes, we can create a policy to allow some specific USB devices using administrative templates in Microsoft Intune.

Here is a link for reference.

https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb

Hope this can be helpful, if there is any update, feel free to contact me.
Vinod Survase 4,781 Reputation points

2024-02-02T13:22:00.9533333+00:00

Hi ZhoumingDuan-MSFT, I have followed the below link with MS support engineer but seems its not working as expected as its still blocking those type for devices https://learn.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors Also followed this link: https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb but not resolved yet.
ZhoumingDuan-MSFT 17,165 Reputation points Microsoft External Staff

2024-02-20T07:14:39.0133333+00:00

@Vinod Survase,Thanks for your update.

Please check the USB device's GUID is correct, policy status in Intune portal, and check if there exist related error in Event Viewer. Location: Event Viewer: Applications and Services logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin.

If there is any update, feel free to let me know.

Share via

How to exclude the USB-C docking station/charging and other input and output devices like keyboard, mouse and external display etc. blocked by USB block policy via Intune and how to exclude in those policies ?

1 answer

Your answer