Enable Object Access Audit Removable Storage from intune

Question

Hello Team,

I'm experiencing an issue while enabling Object Access Audit Removable Storage.

I created a device configuration policy, and then this policy deployed successfully but I didn't observe any effect. However, when enabling it from the local group policy, I can find its events.

Why this policy didn't take effect?

Thanks,

Alaa Elrayes.

Answer 1

@Alaa Elrayes, Thanks for posting in Q&A.

From your description, I know you want to enable Object Access Audit Removable Storage via Intune policy but take no effect.

Based on the information you provided, I noticed that you assign this policy to both device group and user group, but Intune is not recommended that assigning one policy to both device group and user group at the same time, because it will make policy failed to work, and based on my testing, when I create a policy with the same setting as you provided and assign to user group, it apply successfully on my device. So, it is suggested that you assign the policy to user group or device group and see if the policy can work properly.

Hope above information can help you, if there is any update, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.