Forum Discussion

Myriam3007's avatar
Myriam3007
Level 1.6: Donut
16 days ago

Block Input devices

Is there any way I can block an input device to be connected to an Android device managed by Intune?

I mean, I do want to block users from connecting an external mouse or scanner device to a fully manage device.

I do not seem to find anything to do it... of course blocking Bluetooth  but what about if they connect a wired device?

Any help will be appreciated.

Thank you

Myriam

fully managed
Security
  • Michel's avatar
    Michel
    Level 2.3: Gingerbread
    15 days ago

    Intune only has an option for blocking USB storage access, it does not provide a policy to block devices. 

     

    To add what Alex_Muc said, KSP allows you to indeed set the device connection type to charing, but it will not block devices. But KSP does have an option to block devices by setting the USB Host storage option and add exceptions where needed. But, it does require Samsung hardware which might be a downside. 

     

    Alex_Muc, the setting you mention allow set the preferred option. Users are able to change this themselves when a USB cable is connected. 

  • Alex_Muc's avatar
    Alex_Muc
    Level 2.3: Gingerbread
    16 days ago

    I don't think I've seen any restrictions that would explicitly block HID devices.

     

    With Samsung devices, you can configure the type of USB connection using the Knox Service Plugin. (Advanced Restriction policies, "Set USB Device Connection Type"; Charging)
    However, I do not know whether the setting enforces the connection type or only preconfigures it.