This is possible via Intune as well as Group Policy in Windows.Also, for anyone curious, in Windows 10 21H2, I was able to disable Defender with just registry keys, even on Home edition, which I had to figure out myself because all of the solutions I came across on the internet were not working as expected, for this edition. For example, by using filename/path/extension, Defender for Endpoint can prevent end users from executing files with INK, BAT, BIN, CHM, CMD, COM, CPL and EXE extensions.

Write and execute access to specific removable storage devices when the computer is connected to the corporate network or via a VPNĭefender for Endpoint now enables enterprise administrators to better control user read, write and execute access to specific files on removable media.

Read, write, and execute access to specific files on removable storage devices.

The use of specific removable storage devices on specific computers.

Gain write access to specific removable storage devices.

Among the common use cases supported by the feature is allowing certain users to: The article Announcing new removable storage management features on Windows discloses that Microsoft has already begun implementing these control features in Microsoft Defender for Endpoint on Windows in recent months. Microsoft takes a different approach and adds a number of features to Defender for Endpoint to control such devices under Windows. In some companies, USB sockets are therefore made mechanically unusable.

The second risk is that employees will copy corporate data without authorization and it will leak out unnoticed.įor both of these risks, administrators make certain gimmicks to prevent their exploitation under Windows.

There is the risk that employees are carrying malware to systems via infected USB sticks and media.

But these media also pose a threat from two sides. For example, it is very easy to back up data to a USB hard drive or USB flash drive on a daily basis.

Microsoft mentions that external devices such as USB storage devices are common tools for daily work. Microsoft dedicated a Techcommunity post Announcing new removable storage management features on Windows from November 21, 2022, where the details are explained. I already came across the topic a few days ago via this German post by Martin Geuß.

Defender control windows 11