ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Cannot access USB drive

    Scheduled Pinned Locked Moved Unsolved IT Discussion
    intunegroup policylocal
    32 Posts 11 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • zachary715Z
      zachary715
      last edited by

      See if this registry key is present and what it is set to...

      HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
      Name: AllowStorageCard
      Type: DWORD
      Value: 0 for block, 1 for allow

      JaredBuschJ 1 Reply Last reply Reply Quote 1
      • JaredBuschJ
        JaredBusch @zachary715
        last edited by

        @zachary715 said in Cannot access USB drive:

        See if this registry key is present and what it is set to...

        HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
        Name: AllowStorageCard
        Type: DWORD
        Value: 0 for block, 1 for allow

        I'm all out of ideas..

        59be3082-bf44-4069-bd4c-f851bee0220e-image.png

        ObsolesceO 1 Reply Last reply Reply Quote 0
        • DashrenderD
          Dashrender
          last edited by

          Time to take a snap of the registry, then apply the change, then compare them.

          JaredBuschJ 1 Reply Last reply Reply Quote 0
          • JaredBuschJ
            JaredBusch @Dashrender
            last edited by

            @Dashrender said in Cannot access USB drive:

            Time to take a snap of the registry, then apply the change, then compare them.

            It is already broke. that will not find a change.

            DashrenderD 1 Reply Last reply Reply Quote 0
            • DashrenderD
              Dashrender @JaredBusch
              last edited by

              @JaredBusch said in Cannot access USB drive:

              @Dashrender said in Cannot access USB drive:

              Time to take a snap of the registry, then apply the change, then compare them.

              It is already broke. that will not find a change.

              my bad - I meant get a new machine/image, snap before applied.. then apply snap again and compare.

              1 Reply Last reply Reply Quote 0
              • ObsolesceO
                Obsolesce @JaredBusch
                last edited by

                @JaredBusch said in Cannot access USB drive:

                I'm all out of ideas..

                Try with Rufus on that same device.

                1 Reply Last reply Reply Quote 0
                • black3dynamiteB
                  black3dynamite
                  last edited by

                  @JaredBusch said in Cannot access USB drive:

                  HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
                  Name: AllowStorageCard

                  @JaredBusch This link is based on XP and 2003 but can't hurt to compare to a working Windows 10 computer with the computer that is working correctly?
                  https://support.microsoft.com/en-us/help/823732/how-can-i-prevent-users-from-connecting-to-a-usb-storage-device

                  1 Reply Last reply Reply Quote 0
                  • dbeatoD
                    dbeato
                    last edited by

                    I know I am late but this is probably what you are experiencing
                    https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/35053123-have-windows-revert-to-default-settings-when-windo

                    dbeatoD 1 Reply Last reply Reply Quote 0
                    • dbeatoD
                      dbeato @dbeato
                      last edited by

                      @dbeato supposedly this is a workaround
                      https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

                      JaredBuschJ 1 Reply Last reply Reply Quote 1
                      • JaredBuschJ
                        JaredBusch @dbeato
                        last edited by

                        @dbeato said in Cannot access USB drive:

                        @dbeato supposedly this is a workaround
                        https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

                        Yeah, I was already assuming that, but I've checked every setting I can find related to USB access and made sure they were opened again.

                        dbeatoD 1 Reply Last reply Reply Quote 1
                        • dbeatoD
                          dbeato @JaredBusch
                          last edited by

                          @JaredBusch I gotta test with my labs VMs and report findings later.

                          1 Reply Last reply Reply Quote 0
                          • JaredBuschJ
                            JaredBusch
                            last edited by JaredBusch

                            I still have no luck with this and I cannot find any settings that make any sense.

                            I've become good friends with CreenConnect's command screen.

                            #!ps
                            #maxlength=50000
                            #timeout=300000
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\default
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device
                            
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\1e05dd5d-a022-46c5-963c-b20de341170f\default\device
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\2648BF76-DA4B-409A-BFFA-6AF111C298A5\default\device
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\27A6435B-4F98-4B0C-9EE6-6D2B5A0C7879\default\device
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8d196d7f-3eef-48ad-8bea-be749f12d3ad\default\device
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8fb7d64e-70fc-4f9d-89ee-d486817534df\default\device
                            Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\fc01e91f-914c-45af-9d7c-0b2e5fbedf62\default\device
                            

                            e159f088-abf7-45db-addc-1c7f529231fe-image.png

                            1 Reply Last reply Reply Quote 0
                            • notverypunnyN
                              notverypunny
                              last edited by notverypunny

                              Since the registry seems to be the pain-point, as much as they may be looked down upon by lots of the folks here, have you tried any of the registry "cleaner" tools? Ccleaner and Wise365 both have portable versions and they both allow you to run an analysis without applying any changes.

                              1 Reply Last reply Reply Quote 0
                              • warren.stanleyW
                                warren.stanley
                                last edited by

                                @JaredBusch - have you had any luck? I've not had to lock USB down here (yet), but I have had issues with Intune configuration policy (re)application and general "fuzziness". I've been keeping an eye on this thread.

                                I will second @notverypunny on the register cleaner tools sometimes being a possible help. I have to deploy Office 2019 here (MS punish Admins who haven't been able to acquire click-to-run product licencing, with this product :confounded_face: ). Some install errors were fixed with registry cleanup provided by a portable version of a mentioned application.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  Super Sundae
                                  last edited by

                                  Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.

                                  JaredBuschJ M 2 Replies Last reply Reply Quote 1
                                  • JaredBuschJ
                                    JaredBusch @Super Sundae
                                    last edited by

                                    @Super-Sundae said in Cannot access USB drive:

                                    Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.

                                    I still have not

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      manxam @Super Sundae
                                      last edited by

                                      @Super-Sundae : Can you run Sysinternal's RegMon and patch another machine with InTune? That way you can capture the changes.
                                      Perhaps running SysMon at the same time in case it makes changes to file permissions would help..

                                      If you can find out what the policy changes then you should be able to revert on both machines. Hopefully 🙂

                                      1 Reply Last reply Reply Quote 0
                                      • 1
                                      • 2
                                      • 2 / 2
                                      • First post
                                        Last post