This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(262.40000000000003, 82%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVS%3C/text%3E%3C/svg%3E)
How to exclude the USB-C docking station/charging and other input and output devices like keyboard, mouse and external display etc. blocked by USB block policy via Intune and how to exclude in those policies ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 35%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZM%3C/text%3E%3C/svg%3E)
@Vinod Survase,Thanks for posting in Q&A.
From your description, I know you want to exclude some Intune policies.
Based on my researching, you can create a filter following the filter rule syntax in the link below, find the policies and in Assignment page add the filter, then the devices in filter will be excluded from the policy.
https://learn.microsoft.com/en-us/mem/intune/fundamentals/filters
Hoe above information can help you.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi ZhoumingDuan-MSFT, I wanted to exclude the USB-C, Input and Output type of devices classes from the USB Block policy and the way you mentioned is part of device exclusion so it wont work for me. Let me know if you did not understand my requirement.
@Vinod Survase,Sorry for the misunderstanding.
If you want to exclude some devices classes, we can create a policy to allow some specific USB devices using administrative templates in Microsoft Intune.
Here is a link for reference.
https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb
Hope this can be helpful, if there is any update, feel free to contact me.
Hi ZhoumingDuan-MSFT, I have followed the below link with MS support engineer but seems its not working as expected as its still blocking those type for devices https://learn.microsoft.com/en-us/windows-hardware/drivers/install/system-defined-device-setup-classes-available-to-vendors Also followed this link: https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb but not resolved yet.
@Vinod Survase,Thanks for your update.
Please check the USB device's GUID is correct, policy status in Intune portal, and check if there exist related error in Event Viewer. Location: Event Viewer: Applications and Services logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin.
If there is any update, feel free to let me know.