Device Control with Intune

Blog post: oceanleaf.ch/device-control-w...
Official documentation: learn.microsoft.com/en-us/mic...
@NiklasTinner: / niklastinner
Chapters
00:00 Intro
02:24 Concept
04:14 Explaining setup classes
04:48 Demo
09:40 Reusable settings
11:55 Security tip: Microsoft Defender for Endpoint
by oceanleaf.ch/

[@Dmarquesinfo]

Great Video. I was looking to create a policy to Block All USB Storage excluding a list o devices. This will help

[@shrpatil08]

You should have taken it step by step and created a policy in the demo, this would have been a little more easier to know

[@sandervandenbrom8955]

Thank you for the great video. I'm having a terrible time with device control. How can I block all USB sticks for user A on a shared device and allow a specific USB stick for user B? Is this possible?

[@oceanleafnt]

Include / exclude groups should work. But user based policies is always a bit of a struggle in terms of timing and reliability.

[@highlander1461]

Thanks for the video - would be even better if you demoed a blocked device that then get’s approved - not work for me so far either.

[@oceanleafnt]

Remember that the reusable settings are still in preview. I can confirm, that blocking class GUID works perfectly fine.