{"id":6390,"date":"2022-11-23T10:33:39","date_gmt":"2022-11-23T10:33:39","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=6390"},"modified":"2022-11-23T10:33:42","modified_gmt":"2022-11-23T10:33:42","slug":"block-usb-mass-storage-with-intune","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/block-usb-mass-storage-with-intune","title":{"rendered":"Block USB Mass Storage With Intune"},"content":{"rendered":"\n<p>From help here <a href=\"https:\/\/www.imab.dk\/prevent-write-and-execute-access-to-non-approved-removable-storage-using-device-control-and-microsoft-intune\/?unapproved=12903&amp;moderation-hash=be10caa2197354cc1221a43b036dfd91#comment-12903\">Prevent Write and Execute access to non-approved removable storage using Device Control and Microsoft Intune \u2013 imab.dk<\/a><\/p>\n\n\n\n<p><strong>Name <\/strong>Configure Removable Storage Access Control<\/p>\n\n\n\n<p><strong>OMA-URI <\/strong>.\/Vendor\/MSFT\/Defender\/Configuration\/DeviceControlEnabled<\/p>\n\n\n\n<p><strong>Data <\/strong>Integer <\/p>\n\n\n\n<p><strong>Value <\/strong>1<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p><strong>Name <\/strong>MatchAnyRemovableMediaDevices<\/p>\n\n\n\n<p><strong>OMA-URL<\/strong> .\/Vendor\/MSFT\/Defender\/Configuration\/DeviceControl\/PolicyGroups\/%7b7cb998dc-4e35-4191-a0b8-90444bbb6ce9%7d\/GroupData<\/p>\n\n\n\n<p><strong>Data Type<\/strong> String<\/p>\n\n\n\n<p><strong>Value <\/strong>: <\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;Group Id=\"{9fb0c5f7-af60-4b9e-a5d6-105af5c1b427}\">\n    &lt;MatchType>MatchAny&lt;\/MatchType>\n    &lt;DescriptorIdList>\n        &lt;PrimaryId>RemovableMediaDevices&lt;\/PrimaryId>\n    &lt;\/DescriptorIdList>\n&lt;\/Group><\/code><\/pre>\n\n\n\n<p><strong>Name<\/strong> Block Write and Execute Access<\/p>\n\n\n\n<p><strong>OMA-URI<\/strong> .\/Vendor\/MSFT\/Defender\/Configuration\/DeviceControl\/PolicyRules\/%7bcc2be156-173a-41e3-ba80-491a866fa59f%7d\/RuleData<\/p>\n\n\n\n<p><strong>Data Type<\/strong> String<\/p>\n\n\n\n<p><strong>Value<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;PolicyRule Id=\"{cc2be156-173a-41e3-ba80-491a866fa59f}\">\r\n    &lt;Name>Block Read, Write and Execute Access&lt;\/Name>\r\n    &lt;IncludedIdList>\r\n        &lt;GroupId>{9fb0c5f7-af60-4b9e-a5d6-105af5c1b427}&lt;\/GroupId>\r\n    &lt;\/IncludedIdList>\r\n    &lt;ExcludedIdList>\r\n\t\t&lt;GroupId>{79ebf2e6-bc7f-4e4a-baba-ed4b931f3625}&lt;\/GroupId>\r\n\t&lt;\/ExcludedIdList>\r\n    &lt;Entry Id=\"{a0bcff88-b8e4-4f48-92be-16c36adac930}\">\r\n        &lt;Type>Deny&lt;\/Type>\r\n        &lt;Options>0&lt;\/Options>\r\n        &lt;AccessMask>7&lt;\/AccessMask>\r\n    &lt;\/Entry>\r\n\t&lt;Entry Id=\"{07e22eac-8b01-4778-a567-a8fa6ce18a0c}\">\r\n        &lt;Type>AuditDenied&lt;\/Type>\r\n        &lt;Options>3&lt;\/Options>\r\n        &lt;AccessMask>7&lt;\/AccessMask>\r\n    &lt;\/Entry>\r\n&lt;\/PolicyRule><\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>From help here Prevent Write and Execute access to non-approved removable storage using Device Control and Microsoft Intune \u2013 imab.dk Name Configure Removable Storage Access Control OMA-URI [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6390","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=6390"}],"version-history":[{"count":1,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6390\/revisions"}],"predecessor-version":[{"id":6391,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6390\/revisions\/6391"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=6390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=6390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=6390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}