#USB BLOCK SERIAL NUMBER SERIAL NUMBER#

Next go back to the summary tab instead of the reusable settings tab under ASR Select create policy and select windows 10 and later don't select the windows 11, 10 and server as device control is not under that one then selects device control as the type. Then click next and save it you will come back to this later to add your USBs you want to whitelist but we have to have an entry on here to save it and set up the policy.

#USB BLOCK SERIAL NUMBER SERIAL NUMBER#

In the serial number field just enter 12345678 Next create a new reusable settings Name it USB Whitelist or Authorized USBs whatever you want to call it. In the name field enter: Any Removable Media

What you want to do to set this up is do thisĪSR Rules/Reusable Settings/ Create Reusable Settings Name it Only USB whitelisted by serial number are allowed to even be read or wrote to. I currently have this implemented with device control for us.

You can also get nitty gritty and set it up so for example you can plug in any USB and you can read from them all but can only write to whitelisted ones or you can set it to block read and writes on all USB drives and only allow you to read and write whitelisted ones. You will need to go to the reusable settings tab under attack surface reduction to set up the class and the whitelist.ĭefender device contol allows you to block USB media devices but allow you to whitelist based on serial number or other info. If you go to attack surface reduction and make a devic control policy it's the very very bottom of the configuration settings don't use any of the top settings just the very bottom. You can make exceptions your thinking of the device class blocking which block all mass storage devices.

Usb block serial number