How to block USB devices in Mac from Intune.

Question

Hi tried to block USB devices from Intune was creating the policy and getting the below error.

MAC Usb policy .png

Answer 1

@Omkar Parthe, Thanks for posting in Q&A.

From your description, I know you want to block USB devices in Mac from Intune policy.

Based on my research, we can create a device control policy for mac to block USB devices.

Here are some links you can refer.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-device-control-intune?view=o365-worldwide

https://github.com/MicrosoftDocs/microsoft-365-docs/blob/8f06eeece74af5c98ab0b453d821ed0b0161f998/microsoft-365/security/defender-endpoint/mac-device-control-intune.md

Non-official, just for reference.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-device-control-overview?view=o365-worldwide

Hope above information can help you.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hello Omkar

Here is step for your request

1.     Sign in to the Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com/).

2.     In the admin center, navigate to "Devices" and select "Configuration profiles."

3.     Click on "Create profile" and choose the platform as macOS.

4.     Under the settings catalog, select "Device restrictions."

5.     Click on "USB device restrictions" to configure the settings related to USB devices.

6.     To block USB devices, you can set the policy to disable USB storage devices and other USB devices based on your organization's requirements.

7.     Once you have configured the USB device restrictions settings as desired, click on "Create" to create the Device Configuration profile.

8.     Assign the newly created profile to the desired user group or device group by clicking on "Assignments" and selecting the appropriate assignment type.

9.     After assigning the profile, the restrictions will be enforced on the Mac devices within the targeted group, effectively blocking USB devices according to the configured policy.