From bcfce6d45ed1041162a72f8c7cb927afa9cc8499 Mon Sep 17 00:00:00 2001 From: tewchen <81826151+tewchen@users.noreply.github.com> Date: Fri, 2 Apr 2021 11:55:16 -0700 Subject: [PATCH 1/3] Create removablestorage --- removablestorage | 1 + 1 file changed, 1 insertion(+) create mode 100644 removablestorage diff --git a/removablestorage b/removablestorage new file mode 100644 index 0000000..8b13789 --- /dev/null +++ b/removablestorage @@ -0,0 +1 @@ + From eef4f9b5085f513ac15c3c8961f54e9836511029 Mon Sep 17 00:00:00 2001 From: tewchen <81826151+tewchen@users.noreply.github.com> Date: Fri, 2 Apr 2021 12:20:25 -0700 Subject: [PATCH 2/3] Removable Storage Access Control Samples sample policies can be used in GPO and OMR-URI/Intune --- .../Groups - xml.xml | 17 ++++++++++ ...e Access but allow approved USBs - xml.xml | 33 +++++++++++++++++++ 2 files changed, 50 insertions(+) create mode 100644 Removable Storage Access Control Samples/Groups - xml.xml create mode 100644 Removable Storage Access Control Samples/Test 1 Block Write and Execute Access but allow approved USBs - xml.xml diff --git a/Removable Storage Access Control Samples/Groups - xml.xml b/Removable Storage Access Control Samples/Groups - xml.xml new file mode 100644 index 0000000..bc94c37 --- /dev/null +++ b/Removable Storage Access Control Samples/Groups - xml.xml @@ -0,0 +1,17 @@ + + + MatchAny + + RemovableMediaDevices + CdRomDevices + + + + MatchAny + + Generic Flash Disk USB Device + 0781_ + USBSTOR\DISK&VEN__USB&PROD__SANDISK_3.2GEN1&REV_1.00\03003324080520232521&0 + + + diff --git a/Removable Storage Access Control Samples/Test 1 Block Write and Execute Access but allow approved USBs - xml.xml b/Removable Storage Access Control Samples/Test 1 Block Write and Execute Access but allow approved USBs - xml.xml new file mode 100644 index 0000000..f404f4c --- /dev/null +++ b/Removable Storage Access Control Samples/Test 1 Block Write and Execute Access but allow approved USBs - xml.xml @@ -0,0 +1,33 @@ + + + Block Write and Execute Access but allow approved USBs + + {9b28fae8-72f7-4267-a1a5-685f747a7146} + + + {65fa649a-a111-4912-9294-fb6337a25038} + + + Deny + 0 + 6 + + + AuditDenied + 3 + 6 + + + + Audit Write and Execute access to allowed USBs + + {65fa649a-a111-4912-9294-fb6337a25038} + + + + AuditAllowed + 3 + 6 + + + From b902ebdbf18d06a2bc32dec11da71134d6df3874 Mon Sep 17 00:00:00 2001 From: tewchen Date: Fri, 2 Apr 2021 13:49:03 -0700 Subject: [PATCH 3/3] Create d.txt --- d.txt | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 d.txt diff --git a/d.txt b/d.txt new file mode 100644 index 0000000..e69de29