deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 21:37:22 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Added more content for new policy

Browse Source
This commit is contained in:
ManikaDhiman 2019-10-25 10:40:04 -07:00
parent eefb0bdc95
commit 7ae2c7b91b
2 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
windows/client-management/mdm/images/custom-profile-prevent-device-instance-ids.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 127 KiB

19
windows/client-management/mdm/policy-csp-deviceinstallation.md
View File

@ -777,7 +777,7 @@ ADMX Info:
<!--/SupportedValues--> <!--/SupportedValues-->
<!--Example--> <!--Example-->
To enable this policy, use the following SyncML. To enable this policy, use the following SyncML. This example prevents Windows from installing compatible devices with device instance IDs of USB\VID_1F75 and USB\VID_0781. To configure multiple classes, use `&#xF000;` as a delimiter.
``` xml ``` xml
<SyncML> <SyncML>
@ -805,6 +805,23 @@ To verify the policy is applied, check C:\windows\INF\setupapi.dev.log and see i
<<< Section end 2018/11/15 12:26:41.751 <<< Section end 2018/11/15 12:26:41.751
<<< [Exit status: SUCCESS] <<< [Exit status: SUCCESS]
``` ```
You can also block installation and usage of prohibited peripherals by using a custom profile in Intune.
For example, this custom profile prevents installation of devices with matching device instance IDs.
![Custom profile](images/custom-profile-prevent-device-instance-ids.png)
To prevent installation of devices with matching device instance IDs by using custom profile in Intune:
1. Locate the device instance ID.
2. In the sample SyncML, replace `&` in the device instance IDs with `&amp;`.
For example:
Replace
```USBSTOR\DISK&VEN_SAMSUNG&PROD_FLASH_DRIVE&REV_1100\0376319020002347&0```
with
```USBSTOR\DISK&amp;VEN_SAMSUNG&amp;PROD_FLASH_DRIVE&amp;REV_1100\0376319020002347&amp;0```
3. Add the SyncML into the Intune custom device configuration profile.
<!--/Example--> <!--/Example-->
<!--Validation--> <!--Validation-->