Windows 10: USB Storage Blocking with Exceptions via Intune

Hi,We block storage USBs for students, but we would like to whitelist certain storage USB devices that are learning tools typically, IoT devices for coding classes. I want to whitelist individual storage devices. I cannot open up storage USBs to the group of technology students - from experience, they are more inclined to try use USB devices to circumvent school controls or introduce threats.Does anyone know how to whitelist certain storage USB devices with Intune effectively without blocking Beats Headphones and AirPods?Here's what I have done:Used the Administrative Template Policy in In

:)

 

how to Block USB storage on Windows 10 Computers

Requirement :- Block All usb storage media and provide access to only company provided USB storage device(maximum of 10)

Preference :- Group policy ,Defender ,ATP

OS:- Windows 10 1709

User count :- Apprx 30K

Antivirus :- Windows defender

Kindly suggest whether below task can be accomplished using group policy or any alternate way,if yes,please help me required steps

 

INTUNE -

Hi All,

We are moving towards the modern management and deploying apps via INTUNE and i have a request to create an Applocker policy to disable %SYSTEM32%\Windows\PowerShell\* for all users and exclude administrators.

Question is if i block powershell, will the powershell Win32 apps and script deployed via INTUNE will also be blocked ?

 

how to Block USB storage on Windows 10 Computers

Hi Andre,

Thanks for reply.

Requirement is to block all USB + Provide Exception for Few USB device.

Using above mentioned we can deny access to all USB stores and how will be exception part.

Also can you please help me with registry entries for (All Removable Storage Access: Deny All Access )