Windows 10: Mouse and Keyboard installtion blocked by Dfender for Endpoint ASR policy

Hi,I am creating a new policy for removal device protection under Defender for endpoint ASR. now along with removal storage devices. all mouse and keyboard's are getting blocked. is there a way to exclude such devices from policy?

:)

 

Question about ASR Rules and Defender for Endpoint P1

I am looking for some clarification on the ASR rule configuration and how it plays into the Defender for Endpoint P1 license.

I recently bought a P1 license to test ASR rules on endpoints, configured a GP with ASR rules configured to apply to my endpoint, then applied the license to me. Soon after, my developer let me know that he was being blocked from executing a visual basic app. It was one of the rules I set for myself, but I noticed the GP also included another set of users by accident. He did not have a P1 license, nor was his endpoint onboarded in the Windows Security dashboard.

Question is, if I don't need a license for ASR rules, then what is the point of the P1 license (as it pertains to the ASR rules, not the other features that come with the license)

Thank you for any assistance in clarifying my understanding!

 

My wireless keyboard and mouse setup is blocked by Policy Group.

My wireless keyboard and mouse setup is blocked by Policy Group.

Can not use it.

 

MS Defender ASR rules really needed?

I just did some testing and looks like I don’t need to create a Group Policy ASR rule because I opened Task Manager and tried to create a Dump file when selecting the Lsass.exe process and Defender automatically blocked it. The ASR RULE for this is below which is the most serious one. https://learn.microsoft.com/en-us/mi...rity-subsystem