question

SoftwareRegistration-3670 avatar image
0 Votes"
SoftwareRegistration-3670 asked TeemoTang-MSFT commented

how to restrict usb drives and other peripherals in windows 10, does bitlocker do, if not, do you have any solution

I would like to manage all USB devices plugged on our computers throughout the domain. I would like to be able to block or unblock any of them, while letting other devices working in windows 10 function, example printer , mouse, keyboard. With GPO its seems to be difficult. Can Bit Locker do this? Does Windows Defender do this? And if not, what do you suggest to be able to manage this issue. Can Endpoint manage it
Thank You,
Sylvain

windows-serverwindows-10-networkmem-intune-device-configurationsazure-disk-encryption
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

If you resolved it using our solution, please click "Accept Answer" on a reply to help other community members find the helpful reply quickly.
If you resolve it using your own solution, please share your experience and solution here. It will be very beneficial for other community members who have similar questions.

0 Votes 0 ·

1 Answer

TeemoTang-MSFT avatar image
0 Votes"
TeemoTang-MSFT answered

Hi Sylvain,

Unfortunately, if we only focus on Windows 10 built-in features and Microsoft Windows related products, we can’t make it.
Windows doesn’t have a function to pass/block specific USB drive but pass/block other USB drives, Microsoft’s security tools such as BitLocker, Defender, Endpoint, AppLocker neither can do it.
From my experience, we need to use third-party security software for block policy. I ever used Symantec to pass specific USB devices and block all other USB drives, this software use hardware ID to recognize USB drive. You need to enter the hardware IDs of allowable USB devices in advance, then enable Symantec USB port protection(maybe it called this name), then other USB cannot work.


If the Answer is helpful, please click "Accept Answer" and upvote it.
Please note: The mentioned product is owned and operated by a third party. Microsoft has no control regarding to the product's performance and reliability.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.