USB Exception

Question

USB is blocked on all devices but now I have now to enable USB using VID, PID and SN for some of the devices.

Answers ( 2 )

    1
    2025-06-30T17:55:10+05:30

    Hi Madhu, Have a look at my new blog article regarding your question – Best way to Allow USB Access for Specific Devices using Intune – https://www.anoopcnair.com/allow-usb-access-for-specific-devices-intune/

    Best answer
    1
    2025-06-19T19:55:17+05:30

    Hi Madhu, To allow USB access only for specific devices based on VID , PID and Serial Number using Intune Configuration Profiles, you can use Intune Endpoint Protection > Device Control settings via a Settings Catalog profile.

    Identify the Device Information (VID, PID, SN) Plug the USB device into a machine and run this PowerShell command: Get-PnpDevice -Class USB | Get-PnpDeviceProperty | Where-Object {$_.KeyName -like “*DeviceDesc*”}
    then
    Get-WmiObject Win32_USBHub | Select-Object Name, DeviceID

    Find the result in this format “USBVID_XXXX&PID_YYYYSerialNumber”

    Then create a Configuration Profile using Settings Catalog.
    Device Installation > Device Installation Restrictions > Allow installation of devices that match any of these device IDs then Add Allowed device IDs. (Example : USBVID_13D3&PID_XXX3X0001)

    I’ll also try to write a detailed blog post regarding this configuration. Stay tuned!

Leave an answer

Sorry, you do not have permission to answer to this question .