Allow DSC only and Block all Removable

Ravi Sharma 20

In my organization we want to block all the USB Ports and want to allow only Digital Signature Certificate (DSC Pen drive), How can we achieve it?

1 answer

Crystal-MSFT 43,381 Reputation points Microsoft Vendor

2024-04-04T07:18:39.2966667+00:00

@Ravi Sharma, Thanks for posting in Q&A. For your request, after researching, I find a link with the similar request. You can try the solution in the following link to see if it can help.

https://learn.microsoft.com/en-us/answers/questions/1389187/in-my-organization-we-want-to-block-all-the-usb-po

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Ravi Sharma 20 Reputation points

2024-04-04T08:33:19.7633333+00:00

@Crystal-MSFT hii

in your mentioned article there is an option they are claiming is "Block all removable storage devices unless specifically allowed"-

But i checked in mine i didn't see this option anywhere in ASR-

can you give me new steps to block all removable and allow only DSC.

Crystal-MSFT 43,381 Reputation points Microsoft Vendor

2024-04-04T08:50:11.78+00:00

@Ravi Sharma, Thanks for the reply. It seems the policy is updated and the setting is not there. You can try the settings in the following link instead.

https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb

Ravi Sharma 20 Reputation points

2024-04-04T08:57:47.3633333+00:00

@Crystal-MSFT i have already this this and the problem is that it is working for all pendrives but not DSC one, as dsc is still not detecting,
But when i made a policy for normal pendrive, policy was working fine, but when i made for dsc one and added dsc pendrive hardware id, then it was not working

Crystal-MSFT 43,381 Reputation points Microsoft Vendor

2024-04-04T09:04:10.7233333+00:00

@Ravi Sharma, Thanks for the reply. From your description, it seems the policy can be applied successfully, but only the dsc pendrive hardware id is not working. If so, the issue can be on windows side. You can contact windows support to look into the issue.

Ravi Sharma 20 Reputation points

2024-04-04T09:15:46.3566667+00:00

@Crystal-MSFT how can i contact them, any way?

Crystal-MSFT 43,381 Reputation points Microsoft Vendor

2024-04-04T09:29:05.6533333+00:00

@Ravi Sharma, You can call the Phone number in the following link to open case with Windows support.

https://support.microsoft.com/en-us/topic/global-customer-service-phone-numbers-c0389ade-5640-e588-8b0e-28de8afeb3f2
Sign in to comment