How to Block USB Ports of Mac Devices using Intune

Question

Greetings everyone.

I have Office 365 Enterprise Mobility + Security E5 license and I was trying to block USB ports of the organization's Mac devices using Intune.

I looked over the ready template in Intune but I found nothing, is there away to upload a custom policy to do that or how I can create my own custom policy to accomplish this.

Or maybe Intune cannot do this But ATP EDR or Antivirus can do it for us.

Thank you

Answer 1

@Musab Ghannaj Thanks for posting in our Q&A.

For this issue, I find that Apple doesn't have this feature for MacOS in Apple official developer MDM documentation. We can refer to the following link.
https://support.apple.com/en-sg/guide/mdm/mdm879d60c3d/web

Since Apple doesn't support it, intune doesn't support it either. So it is suggested to feedback in Apple.

Thanks for understanding and have a nice day.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

You can follow my blog post here to achieve this.

https://social.technet.microsoft.com/wiki/contents/articles/54305.block-all-usbexternal-storage-drives-on-mac-windows-workstations-with-microsoft-endpoint-manager.aspx

Answer 3

This is the new correct answer: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-device-control-intune?view=o365-worldwide