Cannot access USB drive

JaredBusch

@Obsolesce said in Cannot access USB drive:

Is Windows up to date?

Yes

Have you tried another USB drive?

Multiple

Have you checked in Disk Management?

As soon as you format it in DM, it pops up the error.

Obsolesce

@JaredBusch said in Cannot access USB drive:

@Obsolesce said in Cannot access USB drive:

Is Windows up to date?

Yes

Have you tried another USB drive?

Multiple

Have you checked in Disk Management?

As soon as you format it in DM, it pops up the error.

I think that's a Windows thing. I've always had trouble on Win10 lately (not Intune related) with USB drives. Easily fixed by formatting in on Mac or Linux in my experience.

black3dynamite

@Obsolesce said in Cannot access USB drive:

@JaredBusch said in Cannot access USB drive:

@Obsolesce said in Cannot access USB drive:

Is Windows up to date?

Yes

Have you tried another USB drive?

Multiple

Have you checked in Disk Management?

As soon as you format it in DM, it pops up the error.

I think that's a Windows thing. I've always had trouble on Win10 lately (not Intune related) with USB drives. Easily fixed by formatting in on Mac or Linux in my experience.

So it doesn't work with diskpart too?

JaredBusch

@black3dynamite said in Cannot access USB drive:

@Obsolesce said in Cannot access USB drive:

@JaredBusch said in Cannot access USB drive:

@Obsolesce said in Cannot access USB drive:

Is Windows up to date?

Yes

Have you tried another USB drive?

Multiple

Have you checked in Disk Management?

As soon as you format it in DM, it pops up the error.

I think that's a Windows thing. I've always had trouble on Win10 lately (not Intune related) with USB drives. Easily fixed by formatting in on Mac or Linux in my experience.

So it doesn't work with diskpart too?

Diskpart does everything it is supposed to do.

once the format completes, windows tells you to fuck off.

1337

@JaredBusch said in Cannot access USB drive:

@Pete-S said in Cannot access USB drive:

Check the registry according to this:
https://www.isumsoft.com/windows-10/how-to-disable-use-of-usb-storage-devices-in-windows-10.html

Well, that's not it.

That sucks...

What does the device manager in Windows say? Maybe there is some USB host controller/hub driver that has become corrupted.

zachary715

See if this registry key is present and what it is set to...

HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
Name: AllowStorageCard
Type: DWORD
Value: 0 for block, 1 for allow

JaredBusch

@zachary715 said in Cannot access USB drive:

See if this registry key is present and what it is set to...

HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
Name: AllowStorageCard
Type: DWORD
Value: 0 for block, 1 for allow

I'm all out of ideas..

Dashrender

Time to take a snap of the registry, then apply the change, then compare them.

JaredBusch

@Dashrender said in Cannot access USB drive:

Time to take a snap of the registry, then apply the change, then compare them.

It is already broke. that will not find a change.

Dashrender

@JaredBusch said in Cannot access USB drive:

@Dashrender said in Cannot access USB drive:

Time to take a snap of the registry, then apply the change, then compare them.

It is already broke. that will not find a change.

my bad - I meant get a new machine/image, snap before applied.. then apply snap again and compare.

Obsolesce

@JaredBusch said in Cannot access USB drive:

I'm all out of ideas..

Try with Rufus on that same device.

black3dynamite

@JaredBusch said in Cannot access USB drive:

HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
Name: AllowStorageCard

@JaredBusch This link is based on XP and 2003 but can't hurt to compare to a working Windows 10 computer with the computer that is working correctly?
https://support.microsoft.com/en-us/help/823732/how-can-i-prevent-users-from-connecting-to-a-usb-storage-device

dbeato

I know I am late but this is probably what you are experiencing
https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/35053123-have-windows-revert-to-default-settings-when-windo

dbeato

@dbeato supposedly this is a workaround
https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

JaredBusch

@dbeato said in Cannot access USB drive:

@dbeato supposedly this is a workaround
https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

Yeah, I was already assuming that, but I've checked every setting I can find related to USB access and made sure they were opened again.

dbeato

@JaredBusch I gotta test with my labs VMs and report findings later.

JaredBusch

I still have no luck with this and I cannot find any settings that make any sense.

I've become good friends with CreenConnect's command screen.

#!ps
#maxlength=50000
#timeout=300000
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\default
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device

Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\1e05dd5d-a022-46c5-963c-b20de341170f\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\2648BF76-DA4B-409A-BFFA-6AF111C298A5\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\27A6435B-4F98-4B0C-9EE6-6D2B5A0C7879\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8d196d7f-3eef-48ad-8bea-be749f12d3ad\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8fb7d64e-70fc-4f9d-89ee-d486817534df\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\fc01e91f-914c-45af-9d7c-0b2e5fbedf62\default\device

notverypunny

Since the registry seems to be the pain-point, as much as they may be looked down upon by lots of the folks here, have you tried any of the registry "cleaner" tools? Ccleaner and Wise365 both have portable versions and they both allow you to run an analysis without applying any changes.

warren.stanley

@JaredBusch - have you had any luck? I've not had to lock USB down here (yet), but I have had issues with Intune configuration policy (re)application and general "fuzziness". I've been keeping an eye on this thread.

I will second @notverypunny on the register cleaner tools sometimes being a possible help. I have to deploy Office 2019 here (MS punish Admins who haven't been able to acquire click-to-run product licencing, with this product :confounded_face: ). Some install errors were fixed with registry cleanup provided by a portable version of a mentioned application.

Super Sundae

Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.