{"id":775,"date":"2026-10-12T14:28:39","date_gmt":"2026-10-12T04:28:39","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/?p=775"},"modified":"2026-10-12T14:28:39","modified_gmt":"2026-10-12T04:28:39","slug":"whitelist-usb-devices-on-windows-using-intune","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/whitelist-usb-devices-on-windows-using-intune\/","title":{"rendered":"Whitelist USB Devices on Windows Using Intune"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this&nbsp;&nbsp;Microsoft Intune&nbsp;post, You will learn how to whitelist USB devices on Windows using Intune.<\/p>\n\n\n\n<!--more-->\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-listen-to-this-article\">Listen to this article<\/h3>\n\n\n\n<figure class=\"wp-block-audio\"><audio controls src=\"\/wp-content\/uploads\/2024\/10\/Whitelist-USB-Devices-on-Windows-Using-Intune.mp3\"><\/audio><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">With Microsoft Intune, we can block read and write access to USB ports and prevent users from using USB.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The problem starts when we also want to allow some USB devices and specific USB hardware to be used on the machine, like USB keyboard, etc.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Using Microsoft Intune, we can do that; we can block USB access and, at the same time, whitelist specific devices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-whitelist-usb-devices-on-windows-using-intune\">Whitelist USB Devices on Windows Using Intune<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To whitelist USB devices on Windows, we will use Intune Administrative Templates, as you will see.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To whitelist USB devices, create a setting catalog policy and set the values in the table below (see screenshot for more details).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the catalog, search for the last four values and add the hardware IDs of the devices you would like to whitelist.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Create a configuration profile with the following details.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Platform<\/strong> &#8211;  Windows 10 or later<\/li>\n\n\n\n<li><strong>Profile type<\/strong> &#8211;  Settings catalog<\/li>\n\n\n\n<li><strong>Removable Disks<\/strong> &#8211;  Deny execute access Enabled<\/li>\n\n\n\n<li><strong>All Removable Storage classes<\/strong> &#8211; Deny all access Enabled<\/li>\n\n\n\n<li><strong>Removable Disks<\/strong> &#8211; Deny read access Enabled<\/li>\n\n\n\n<li><strong>Allow installation of devices that match any of these device IDs<\/strong> &#8211;  Add the hardware ID for the devices you want to whitelist<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Your configuration profile should look like this:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"795\" height=\"700\" data-src=\"\/wp-content\/uploads\/2024\/10\/image-19.png\" alt=\"\" class=\"wp-image-776 lazyload\" data-srcset=\"\/wp-content\/uploads\/2024\/10\/image-19.png 795w, \/wp-content\/uploads\/2024\/10\/image-19-300x264.png 300w, \/wp-content\/uploads\/2024\/10\/image-19-768x676.png 768w, \/wp-content\/uploads\/2024\/10\/image-19-480x423.png 480w\" data-sizes=\"(max-width: 795px) 100vw, 795px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 795px; --smush-placeholder-aspect-ratio: 795\/700;\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">As an optional step, you can add&nbsp;<strong>Block untrusted and unsigned processes that run from USB<\/strong>&nbsp;and set it to enabled.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"785\" height=\"204\" data-src=\"\/wp-content\/uploads\/2024\/10\/image-20.png\" alt=\"\" class=\"wp-image-777 lazyload\" data-srcset=\"\/wp-content\/uploads\/2024\/10\/image-20.png 785w, \/wp-content\/uploads\/2024\/10\/image-20-300x78.png 300w, \/wp-content\/uploads\/2024\/10\/image-20-768x200.png 768w, \/wp-content\/uploads\/2024\/10\/image-20-480x125.png 480w\" data-sizes=\"(max-width: 785px) 100vw, 785px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 785px; --smush-placeholder-aspect-ratio: 785\/204;\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-related-articles\">Related Articles<\/h2>\n\n\n\n<ul class=\"wp-block-yoast-seo-related-links yoast-seo-related-links\">\n<li><a href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2024\/09\/05\/block-copy-paste-from-ios-business-apps-with-intune\/\">Block Copy Paste from iOS Business Apps with Intune<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/cloudproinc.com.au\/index.php\/2022\/02\/02\/5-benefits-of-using-microsoft-intune-in-your-business\/\">5 Benefits of Using Microsoft Intune in Your Business<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/www.cloudproinc.com.au\/index.php\/2024\/03\/28\/how-to-turn-off-windows-hello-in-microsoft-intune\/\">How to Turn Off Windows Hello in Microsoft Intune<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/cloudproinc.com.au\/index.php\/2024\/03\/28\/streamlining-office-365-email-setup-on-managed-devices-with-microsoft-intune\/\">Streamlining Office 365 Email Setup on Managed Devices with Microsoft Intune<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/cloudproinc.com.au\/index.php\/2024\/03\/28\/streamlining-google-chrome-updates-in-your-organization-with-intune\/\">Streamlining Google Chrome Updates in Your Organization with Intune<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>In this&nbsp;&nbsp;Microsoft Intune&nbsp;post, You will learn how to whitelist USB devices on Windows using Intune.<\/p>\n","protected":false},"author":1,"featured_media":778,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[13,12],"tags":[],"class_list":["post-775","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","category-microsoft-intune"],"jetpack-related-posts":[{"id":59050,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/09\/25\/how-smbs-can-protect-their-workstations-with-microsoft-intune\/","url_meta":{"origin":775,"position":0},"title":"How SMBs Can Protect Their Workstations with Microsoft Intune","author":"CPI Staff","date":"September 25, 2026","format":false,"excerpt":"In this blog post, I'll explain five security measures that can help small and medium-sized businesses (SMBs) significantly reduce their cyber security risk and improve their overall security posture. As an IT consultant with almost 20 years of experience working with both SMBs and large enterprises, I've seen firsthand the\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/09\/SMBIntune.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/09\/SMBIntune.png 1x, \/wp-content\/uploads\/2026\/09\/SMBIntune.png 1.5x, \/wp-content\/uploads\/2026\/09\/SMBIntune.png 2x, \/wp-content\/uploads\/2026\/09\/SMBIntune.png 3x, \/wp-content\/uploads\/2026\/09\/SMBIntune.png 4x"},"classes":[]},{"id":53106,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/enhance-windows-11-security-with-asr-rules\/","url_meta":{"origin":775,"position":1},"title":"Enhance Windows 11 Security With ASR rules","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"In this Microsoft Intune blog post, we will explain and demonstrate how to enhance Windows 11 security by implementing Attack Surface Reduction (ASR) rules. In today\u2019s digital landscape, securing endpoints has become more critical than ever. With the increasing sophistication of cyber threats, organizations must adopt robust security measures to\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/02\/Enhancing-Windows-11-Security-with-Microsoft-Intune-Attack-Surface-Reduction-Rules.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/02\/Enhancing-Windows-11-Security-with-Microsoft-Intune-Attack-Surface-Reduction-Rules.webp 1x, \/wp-content\/uploads\/2025\/02\/Enhancing-Windows-11-Security-with-Microsoft-Intune-Attack-Surface-Reduction-Rules.webp 1.5x, \/wp-content\/uploads\/2025\/02\/Enhancing-Windows-11-Security-with-Microsoft-Intune-Attack-Surface-Reduction-Rules.webp 2x"},"classes":[]},{"id":53832,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/manage-android-byod-with-microsoft-intune\/","url_meta":{"origin":775,"position":2},"title":"Manage Android BYOD with Microsoft Intune","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"A practical guide to securing personal Android devices with Intune work profiles, app protection, and Conditional Access\u2014without invading employee privacy.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 1x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 1.5x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 2x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 3x, \/wp-content\/uploads\/2025\/09\/manage-android-byod-with-microsoft-intune-using-work-profile.png 4x"},"classes":[]},{"id":610,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/block-copy-paste-from-ios-business-apps-with-intune\/","url_meta":{"origin":775,"position":3},"title":"Block Copy Paste from iOS Business Apps with Intune","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"This Microsoft Intune blog post will show how to block copy-paste from iOS Business Apps using Microsoft Intune. Microsoft Intune MDM capabilities across Windows, iOS, and Android allow businesses to protect corporate data using App protection policies (for Windows, we use Windows Information Protection policies). Intune's Mobile Application Management (MAM)\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2024\/09\/Block-copy-paste-from-ios-devices.webp","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2024\/09\/Block-copy-paste-from-ios-devices.webp 1x, \/wp-content\/uploads\/2024\/09\/Block-copy-paste-from-ios-devices.webp 1.5x, \/wp-content\/uploads\/2024\/09\/Block-copy-paste-from-ios-devices.webp 2x"},"classes":[]},{"id":56906,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/block-personally-owned-devices-with-microsoft-intune\/","url_meta":{"origin":775,"position":4},"title":"Block Personally Owned Devices with Microsoft Intune","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"Learn how to stop personal (BYOD) devices from enrolling in Intune, while still enabling secure access where needed. Practical steps, key settings, and common gotchas for IT teams.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/01\/post-9.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/01\/post-9.png 1x, \/wp-content\/uploads\/2026\/01\/post-9.png 1.5x, \/wp-content\/uploads\/2026\/01\/post-9.png 2x, \/wp-content\/uploads\/2026\/01\/post-9.png 3x, \/wp-content\/uploads\/2026\/01\/post-9.png 4x"},"classes":[]},{"id":53625,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/manage-windows-11-byod-devices-with-microsoft-intune\/","url_meta":{"origin":775,"position":5},"title":"Manage Windows 11 BYOD Devices with Microsoft Intune","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"This post \"Manage Windows 11 BYOD Devices with Microsoft Intune\" explores what Intune can do for Windows 11 BYOD, its benefits and disadvantages, and the steps to implement and onboard personal Windows 11 devices. In the modern workplace, flexibility is no longer a perk\u2014it\u2019s an expectation. Many organisations have embraced\u2026","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2025\/08\/manage-windows-11-byod-devices-with-microsoft-intune-1.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2025\/08\/manage-windows-11-byod-devices-with-microsoft-intune-1.png 1x, \/wp-content\/uploads\/2025\/08\/manage-windows-11-byod-devices-with-microsoft-intune-1.png 1.5x, \/wp-content\/uploads\/2025\/08\/manage-windows-11-byod-devices-with-microsoft-intune-1.png 2x, \/wp-content\/uploads\/2025\/08\/manage-windows-11-byod-devices-with-microsoft-intune-1.png 3x, \/wp-content\/uploads\/2025\/08\/manage-windows-11-byod-devices-with-microsoft-intune-1.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2024\/10\/Whitelist-USB-Devices-on-Windows-Using-Intune.webp","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=775"}],"version-history":[{"count":2,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/775\/revisions"}],"predecessor-version":[{"id":53152,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/775\/revisions\/53152"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/778"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}