ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Unsolved Cannot access USB drive

    IT Discussion
    intune group policy local
    11
    32
    3.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      black3dynamite
      last edited by

      @JaredBusch said in Cannot access USB drive:

      HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
      Name: AllowStorageCard

      @JaredBusch This link is based on XP and 2003 but can't hurt to compare to a working Windows 10 computer with the computer that is working correctly?
      https://support.microsoft.com/en-us/help/823732/how-can-i-prevent-users-from-connecting-to-a-usb-storage-device

      1 Reply Last reply Reply Quote 0
      • D
        dbeato
        last edited by

        I know I am late but this is probably what you are experiencing
        https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/35053123-have-windows-revert-to-default-settings-when-windo

        D 1 Reply Last reply Reply Quote 0
        • D
          dbeato @dbeato
          last edited by

          @dbeato supposedly this is a workaround
          https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

          J 1 Reply Last reply Reply Quote 1
          • J
            JaredBusch @dbeato
            last edited by

            @dbeato said in Cannot access USB drive:

            @dbeato supposedly this is a workaround
            https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

            Yeah, I was already assuming that, but I've checked every setting I can find related to USB access and made sure they were opened again.

            D 1 Reply Last reply Reply Quote 1
            • D
              dbeato @JaredBusch
              last edited by

              @JaredBusch I gotta test with my labs VMs and report findings later.

              1 Reply Last reply Reply Quote 0
              • J
                JaredBusch
                last edited by JaredBusch

                I still have no luck with this and I cannot find any settings that make any sense.

                I've become good friends with CreenConnect's command screen.

                #!ps
                #maxlength=50000
                #timeout=300000
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\default
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device
                
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\1e05dd5d-a022-46c5-963c-b20de341170f\default\device
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\2648BF76-DA4B-409A-BFFA-6AF111C298A5\default\device
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\27A6435B-4F98-4B0C-9EE6-6D2B5A0C7879\default\device
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8d196d7f-3eef-48ad-8bea-be749f12d3ad\default\device
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8fb7d64e-70fc-4f9d-89ee-d486817534df\default\device
                Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\fc01e91f-914c-45af-9d7c-0b2e5fbedf62\default\device
                

                e159f088-abf7-45db-addc-1c7f529231fe-image.png

                1 Reply Last reply Reply Quote 0
                • N
                  notverypunny
                  last edited by notverypunny

                  Since the registry seems to be the pain-point, as much as they may be looked down upon by lots of the folks here, have you tried any of the registry "cleaner" tools? Ccleaner and Wise365 both have portable versions and they both allow you to run an analysis without applying any changes.

                  1 Reply Last reply Reply Quote 0
                  • W
                    warren.stanley
                    last edited by

                    @JaredBusch - have you had any luck? I've not had to lock USB down here (yet), but I have had issues with Intune configuration policy (re)application and general "fuzziness". I've been keeping an eye on this thread.

                    I will second @notverypunny on the register cleaner tools sometimes being a possible help. I have to deploy Office 2019 here (MS punish Admins who haven't been able to acquire click-to-run product licencing, with this product :confounded_face: ). Some install errors were fixed with registry cleanup provided by a portable version of a mentioned application.

                    1 Reply Last reply Reply Quote 0
                    • S
                      Super Sundae
                      last edited by

                      Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.

                      J M 2 Replies Last reply Reply Quote 1
                      • J
                        JaredBusch @Super Sundae
                        last edited by

                        @Super-Sundae said in Cannot access USB drive:

                        Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.

                        I still have not

                        1 Reply Last reply Reply Quote 0
                        • M
                          manxam @Super Sundae
                          last edited by

                          @Super-Sundae : Can you run Sysinternal's RegMon and patch another machine with InTune? That way you can capture the changes.
                          Perhaps running SysMon at the same time in case it makes changes to file permissions would help..

                          If you can find out what the policy changes then you should be able to revert on both machines. Hopefully 🙂

                          1 Reply Last reply Reply Quote 0
                          • 1
                          • 2
                          • 2 / 2
                          • First post
                            Last post