Add the option to allow/block USB devices on the endpoint protection.
Christian Stückrath commented
I would love to see this as well.
Block devices based on device type, vendor, interface type, serial number and/or whitelist serial numbers for users or devices.
DLPe (McAfee) has a great approach here.
Lee Seeman commented
This functionality is in DesktopAuthority and Kaspersky Endpoint Protection. It would be nice to have it in SCCM with allow/deny based on USB UUID.
Ian Burnell commented
I logged a forum thread on this
It may be possible via Group Policy but would surely be much easier to control USB access through the EndPoint Policies built into SCCM which could then be deployed to specific collections to allow or deny access as required
Vegard Søbstad Alsli commented
This can be done with a simple policy as far as i know.