I'm trying to manage USB drive access using Intune. We want to block all USB drives except for specific ones that we need to allow. From what I understand, this requires the USB drives to have a unique Hardware ID, but I haven't been able to find any drives that meet this requirement. Has anyone dealt with this issue and found a solution?
2 Answers
Have you considered just whitelisting the specific devices you want to allow and blocking all others? It might simplify the process without needing to fuss over unique IDs.
I can't say I know of any USB drives that provide unique IDs for each unit, but in my experience, we've successfully blocked all USB drives while allowing only a specific encrypted model we issue to our staff.
Yeah, I did that before and it worked well. I found a USB model that had a unique ID, which made it easier. Our main issue is preventing data from leaving the system while still needing to allow certain data ingress. In our setting, particularly with sensitive research and compliance requirements, it's tricky. Occasionally, we do need USB access, primarily for IT, due to network limitations.
That's exactly what we're trying to do! The issue is that we still need to find the hardware IDs for the drives we plan to allow.