question

karthikpalani-9530 avatar image
0 Votes"
karthikpalani-9530 asked Crystal-MSFT commented

Intune - USB block

Hi All,

I am trying to create a USB block policy on the test machines. Seems for some reason it says not applicable or pending. The device is online

96011-at.jpg



I tried attack surface reduction policy, administration template policy, Device control policy. Nothing is getting applied. Is there any prerequisites need to be fulfilled for this to work. Please suggest

mem-intune-generalmem-intune-device-configurations
at.jpg (22.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image
0 Votes"
Crystal-MSFT answered Crystal-MSFT edited

@karthikpalani-9530, From your description, I know some Intune policies are not applied with not applicable status or pending.

Firstly, please ensure the OS is Intune supported. Here is a link list the supported OS in Intune:
https://docs.microsoft.com/en-us/mem/intune/fundamentals/supported-devices-browsers#intune-supported-operating-systems

If the OS is in the supported list, please firstly focus on one affected policy and collect the following information to troubleshoot
1. Could you let us know how many devices are affected? What is the OS version? And What are the manufacture of these affected devices?
2. Please get a screen shot of the configuration of one affected policy.
3. Please check the event log under Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider->Admin on one affected client to see if there's any error related.

If there's any update, feel free to let us know.



If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

karthikpalani-9530 avatar image
0 Votes"
karthikpalani-9530 answered Crystal-MSFT edited

Thanks for your response. We are using Windows 10 v1709 and later. I tried even on 1809v. Remaining information i will check and update you at the earliest

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@karthikpalani-9530, Thanks for the update. I notice we have checked on windows 10 1809 and find the same issue. And we will check and collect the information to go further. Given the situation, we will wait here for your update. If there's anything we can help, feel free to let us know.

0 Votes 0 ·
karthikpalani-9530 avatar image
0 Votes"
karthikpalani-9530 answered Crystal-MSFT commented

Yes Crystal, I tried on 1909v as well. It says not applicable or pending. Any insights let me know please

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@karthikpalani-9530, Thanks for the reply. From your description, I know the policy shows not applicable on windows 1909 as well. Could you get a screen shot of the policy settings we configured to us to check?

Meanwhile, please go to one affected client and check the event log under Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostic-Provider->Admin to see if there's any error related to get more finding.

Please check the above information and if there's anything unclear, feel free to let us know.

0 Votes 0 ·

@karthikpalani-9530, Long time not heard from you. Could you let us know if the issue is resolved. If not, could you provide the above information to us to clarify? If there's any update, feel free to let us know.

0 Votes 0 ·