The custom policy allows customization of the URL where user is redirected to when interacting with an end user facing “device restricted” notification.To achieve a high degree of granularity, USB access level can be specified for Product ID, Vendor ID, and Serial Number.

USB device access can be set to Read, Write, Execute, No access.

The capability supports Audit and Block enforcement levels.The access level is controlled through custom policies. USB storage device control for Mac is designed to regulate the level of access given to external USB storage devices (including SD cards). What level of USB device control comes with this new capability? Enabling removable device control policies reduces the attack surface on user’s machines and protects organizations against malware and data loss in these scenarios. Many users will plug in USB removable storage devices without considering their potential security risk. Preventing threats and securing your organization takes a multi-layered approach. Today we are thrilled to announce the public preview of USB storage device control for Mac! In line with our commitment to rapidly expand Microsoft Defender for Endpoint cross-platform capabilities, we are preparing a set of enhancements to further reduce organizational exposure attributed to common end user activities.

Microsoft Defender for Endpoint on Mac USB storage device control is in general availability as of July 2021.

Defender for macos