ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Unsolved Cannot access USB drive

    IT Discussion
    intune group policy local
    11
    32
    3.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • black3dynamiteB
      black3dynamite @Obsolesce
      last edited by

      @Obsolesce said in Cannot access USB drive:

      @JaredBusch said in Cannot access USB drive:

      @Obsolesce said in Cannot access USB drive:

      Is Windows up to date?

      Yes

      Have you tried another USB drive?

      Multiple

      Have you checked in Disk Management?

      As soon as you format it in DM, it pops up the error.

      I think that's a Windows thing. I've always had trouble on Win10 lately (not Intune related) with USB drives. Easily fixed by formatting in on Mac or Linux in my experience.

      So it doesn't work with diskpart too?

      JaredBuschJ 1 Reply Last reply Reply Quote 0
      • JaredBuschJ
        JaredBusch @black3dynamite
        last edited by

        @black3dynamite said in Cannot access USB drive:

        @Obsolesce said in Cannot access USB drive:

        @JaredBusch said in Cannot access USB drive:

        @Obsolesce said in Cannot access USB drive:

        Is Windows up to date?

        Yes

        Have you tried another USB drive?

        Multiple

        Have you checked in Disk Management?

        As soon as you format it in DM, it pops up the error.

        I think that's a Windows thing. I've always had trouble on Win10 lately (not Intune related) with USB drives. Easily fixed by formatting in on Mac or Linux in my experience.

        So it doesn't work with diskpart too?

        Diskpart does everything it is supposed to do.

        once the format completes, windows tells you to fuck off.

        1 Reply Last reply Reply Quote 0
        • 1
          1337 @JaredBusch
          last edited by

          @JaredBusch said in Cannot access USB drive:

          @Pete-S said in Cannot access USB drive:

          Check the registry according to this:
          https://www.isumsoft.com/windows-10/how-to-disable-use-of-usb-storage-devices-in-windows-10.html

          Well, that's not it.

          That sucks...

          What does the device manager in Windows say? Maybe there is some USB host controller/hub driver that has become corrupted.

          1 Reply Last reply Reply Quote 0
          • zachary715Z
            zachary715
            last edited by

            See if this registry key is present and what it is set to...

            HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
            Name: AllowStorageCard
            Type: DWORD
            Value: 0 for block, 1 for allow

            JaredBuschJ 1 Reply Last reply Reply Quote 1
            • JaredBuschJ
              JaredBusch @zachary715
              last edited by

              @zachary715 said in Cannot access USB drive:

              See if this registry key is present and what it is set to...

              HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
              Name: AllowStorageCard
              Type: DWORD
              Value: 0 for block, 1 for allow

              I'm all out of ideas..

              59be3082-bf44-4069-bd4c-f851bee0220e-image.png

              ObsolesceO 1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender
                last edited by

                Time to take a snap of the registry, then apply the change, then compare them.

                JaredBuschJ 1 Reply Last reply Reply Quote 0
                • JaredBuschJ
                  JaredBusch @Dashrender
                  last edited by

                  @Dashrender said in Cannot access USB drive:

                  Time to take a snap of the registry, then apply the change, then compare them.

                  It is already broke. that will not find a change.

                  DashrenderD 1 Reply Last reply Reply Quote 0
                  • DashrenderD
                    Dashrender @JaredBusch
                    last edited by

                    @JaredBusch said in Cannot access USB drive:

                    @Dashrender said in Cannot access USB drive:

                    Time to take a snap of the registry, then apply the change, then compare them.

                    It is already broke. that will not find a change.

                    my bad - I meant get a new machine/image, snap before applied.. then apply snap again and compare.

                    1 Reply Last reply Reply Quote 0
                    • ObsolesceO
                      Obsolesce @JaredBusch
                      last edited by

                      @JaredBusch said in Cannot access USB drive:

                      I'm all out of ideas..

                      Try with Rufus on that same device.

                      1 Reply Last reply Reply Quote 0
                      • black3dynamiteB
                        black3dynamite
                        last edited by

                        @JaredBusch said in Cannot access USB drive:

                        HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System
                        Name: AllowStorageCard

                        @JaredBusch This link is based on XP and 2003 but can't hurt to compare to a working Windows 10 computer with the computer that is working correctly?
                        https://support.microsoft.com/en-us/help/823732/how-can-i-prevent-users-from-connecting-to-a-usb-storage-device

                        1 Reply Last reply Reply Quote 0
                        • dbeatoD
                          dbeato
                          last edited by

                          I know I am late but this is probably what you are experiencing
                          https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/35053123-have-windows-revert-to-default-settings-when-windo

                          dbeatoD 1 Reply Last reply Reply Quote 0
                          • dbeatoD
                            dbeato @dbeato
                            last edited by

                            @dbeato supposedly this is a workaround
                            https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

                            JaredBuschJ 1 Reply Last reply Reply Quote 1
                            • JaredBuschJ
                              JaredBusch @dbeato
                              last edited by

                              @dbeato said in Cannot access USB drive:

                              @dbeato supposedly this is a workaround
                              https://social.technet.microsoft.com/Forums/en-US/a93b2214-48da-4dbd-89cd-a6b5ef77369f/resetting-device-profiles-without-retiring-device?forum=microsoftintuneprod

                              Yeah, I was already assuming that, but I've checked every setting I can find related to USB access and made sure they were opened again.

                              dbeatoD 1 Reply Last reply Reply Quote 1
                              • dbeatoD
                                dbeato @JaredBusch
                                last edited by

                                @JaredBusch I gotta test with my labs VMs and report findings later.

                                1 Reply Last reply Reply Quote 0
                                • JaredBuschJ
                                  JaredBusch
                                  last edited by JaredBusch

                                  I still have no luck with this and I cannot find any settings that make any sense.

                                  I've become good friends with CreenConnect's command screen.

                                  #!ps
#maxlength=50000
#timeout=300000
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\default
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device

Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\1e05dd5d-a022-46c5-963c-b20de341170f\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\2648BF76-DA4B-409A-BFFA-6AF111C298A5\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\27A6435B-4F98-4B0C-9EE6-6D2B5A0C7879\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8d196d7f-3eef-48ad-8bea-be749f12d3ad\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\8fb7d64e-70fc-4f9d-89ee-d486817534df\default\device
Get-ChildItem -Path HKLM:\SOFTWARE\Microsoft\PolicyManager\Providers\fc01e91f-914c-45af-9d7c-0b2e5fbedf62\default\device

                                  e159f088-abf7-45db-addc-1c7f529231fe-image.png

                                  1 Reply Last reply Reply Quote 0
                                  • notverypunnyN
                                    notverypunny
                                    last edited by notverypunny

                                    Since the registry seems to be the pain-point, as much as they may be looked down upon by lots of the folks here, have you tried any of the registry "cleaner" tools? Ccleaner and Wise365 both have portable versions and they both allow you to run an analysis without applying any changes.

                                    1 Reply Last reply Reply Quote 0
                                    • warren.stanleyW
                                      warren.stanley
                                      last edited by

                                      @JaredBusch - have you had any luck? I've not had to lock USB down here (yet), but I have had issues with Intune configuration policy (re)application and general "fuzziness". I've been keeping an eye on this thread.

                                      I will second @notverypunny on the register cleaner tools sometimes being a possible help. I have to deploy Office 2019 here (MS punish Admins who haven't been able to acquire click-to-run product licencing, with this product :confounded_face: ). Some install errors were fixed with registry cleanup provided by a portable version of a mentioned application.

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        Super Sundae
                                        last edited by

                                        Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.

                                        JaredBuschJ M 2 Replies Last reply Reply Quote 1
                                        • JaredBuschJ
                                          JaredBusch @Super Sundae
                                          last edited by

                                          @Super-Sundae said in Cannot access USB drive:

                                          Just out of interest. Did anyone find the answer to your problem? We are having the exact same problem in a production environment. A device had the Intune USB block policy enabled and trying to reverse it has been a pain with no luck.

                                          I still have not

                                          1 Reply Last reply Reply Quote 0
                                          • M
                                            manxam @Super Sundae
                                            last edited by

                                            @Super-Sundae : Can you run Sysinternal's RegMon and patch another machine with InTune? That way you can capture the changes.
                                            Perhaps running SysMon at the same time in case it makes changes to file permissions would help..

                                            If you can find out what the policy changes then you should be able to revert on both machines. Hopefully 🙂

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 2 / 2
                                            • First post
                                              Last post