Configure Web Filtering in Microsoft Defender for Endpoint

In my session with ‪@DefenderUserGroup‬ I managed to cover a massive 10 demos in 55 minutes, which even I'll admit is a little... um, rushed?
Here's a more relaxed, methodical and thorough version of one of my first demos, Microsoft Defender for Endpoint's Web Filtering capability.
Here's the session! • The A-Z of Microsoft D...

[@TechNerd202]

Hi Dean, thanks for the Video, i have different question not related to this topic.
I want to block USB access for windows devices either from Intune or Defender for Endpoint but allow the basic USB devices like Mouse and Keyboards to work. I have tried creating policy from Configuration Profile (Administrative Template) and from Device Control (ASR) but nothing seems to work the way it should be. As per the MS documents it is simple but in practical it is not working. Either it is blocking all USB or Allowing all. I have gone through many youtube video but could not find a easy and best way which work.
Have you tried this scenario and did it work, if not then could you add this to your list as it will be very helpful for others as well, since this is the basic requirement of every organization which is using Defender for Endpoint but achieving the desired result seems quite difficult.

[@gurjotgrewal3800]

Hello,
I already have web content filtering, however I want to see which machines are accessing by domain, not by web category. I go to the Domains tab, but I cannot see which machines are trying to access from that page, however I see that I can select the domains but theres no real action to correlate with selecting. Am I suppose to see a side view that pops up?

[@jimparsons8485]

I had been hoping to find information on blocking ALL websites and then only allowing a specific list of Approved websites. I don't want any web browsing except for the sites required for the identified ones filling a business function.

[@patrick__007]

Awesome. I can only say more, more & more ^^

[@DeanEllerbyMVP]

Thanks! 😄

[@KevinHodges-qt8oc]

Any reason why my Remediation drop down menu is empty? I only get No automated response as an option. Can't figure out why

[@bthjf12003]

I wish Microsoft was added the category when a web site was blocked like Fortigate, and a request for users to inform support directly from the blocked page.

[@kb8570]

Thank you. Is staff members are only allowed to use Microsoft OneDrive, Is there a category to black file sharing websites like dropbox, WeTransfer, Googledrive ? Also, is there an option to allow a single website that may be blocked, for example if you blocked Social Media websites but wanted to only allow LinkedIn ?

[@DeanEllerbyMVP]

There is a native category for file sharing; yes. I'm not sure if it will permit OneDrive though... I'll need to test it, but I don't think it will. There's no allowlist or blocklist concept.
If you want to do that, you'll need to look at Defender for Cloud Apps (i'm preparing a video for that, too!)

[@kb8570]

Thank you@@DeanEllerbyMVP

[@sutty-ln5ww]

Many thanks for this demo. However, in my organization I am facing issues on boarding the device. I have a AVD and I need to onboard the device. I tried everything with no luck.