Can Device Guard be used to allow/block specific devices like USB?

%3CLINGO-SUB%20id%3D%22lingo-sub-196396%22%20slang%3D%22en-US%22%3ECan%20Device%20Guard%20be%20used%20to%20allow%2Fblock%20specific%20devices%20like%20USB%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-196396%22%20slang%3D%22en-US%22%3E%3CP%3EI%20wan%20to%20know%20if%20Application%20Control%20can%20be%20used%20to%20whitelist%20devices%20like%20USB.%20I%20mean%2C%20if%20I%20only%20want%20some%20USB%20sticks%20to%20run%20on%20my%20system.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-196396%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApplication%20Control%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDevice%20Guard%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-196405%22%20slang%3D%22en-US%22%3ERE%3A%20Can%20Device%20Guard%20be%20used%20to%20allow%2Fblock%20specific%20devices%20like%20USB%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-196405%22%20slang%3D%22en-US%22%3EI%20don't%20think%20Application%20Control%20can%20be%20used%20for%20that.%20The%20better%20solution%20is%20to%20protect%20the%20data%20regardless%20where%20it%20lives.%20A%20solution%20like%20Azure%20Information%20Protection%20(AIP)%20will%20protect%20the%20data%20on%20the%20USB%20drives%2C%20SharePoint%2C%20OneDrive%2C%20shared%20folder%2C%20etc...so%20even%20if%20someone%20does%20used%20an%20%22unapproved%20USB%22%20he%20data%20is%20still%20protected.%3C%2FLINGO-BODY%3E
New Contributor

I wan to know if Application Control can be used to whitelist devices like USB. I mean, if I only want some USB sticks to run on my system. 

 

Thanks!

1 Reply
I don't think Application Control can be used for that. The better solution is to protect the data regardless where it lives. A solution like Azure Information Protection (AIP) will protect the data on the USB drives, SharePoint, OneDrive, shared folder, etc...so even if someone does used an "unapproved USB" he data is still protected.
www.000webhost.com