Block USB devices on Windows PC using Intune

From device:

prevent installation of devices
Prevent installation of devices not described by other policy settings

[LPatel-ggcq]

This setting blocking everything including usb keyboard, mouse and head phone. Is there way to unblock specific devices.

[subhuman]

Thank you for this demonstration .
I have a question, do you do both ? creating policies both on the Device and Endpoint Security ?

[ravikumarchagalamarriravik]

How to enable particular user and please explain

[toiwhrz]

Thanks for your demo, I have a query for it. For the second way I select, whether can I block the USB storage which driver had been installed in before, or not. I think if my USB Storage is not used in my pc, can be blocked.

[infinity]

Device Control is messing from Attack Surface reduction Policy on my version of endpoint security. any idea if can select deferent options?

[moistiest]

Blocking All USB storage devices is good but how to allow a specific usb storage device. Registered devices only ?

[ngthcuong]

Thanks!. This setting may unblock USB Token? it supported for e-sign (Dongle).

[chaos]

Ia this policy gets applied directly an all the devices enrolled to Intune or it must be compliant ?

[wigglywrigglydoo]

There's absolutely no reason to block all USB in this day and age. Please do another one that will how to how to use Device Control and Reusable Setting and show that it works.