How to block all storage devices on a Windows device using a SureMDM restriction profile.

This article is intended to help IT administrators block all storage devices, preventing data transfer to external media such as SD cards, USB devices, and similar storage options.

Prerequisite

Windows – Dual-enrolled

Steps

1. Devices must be enrolled in the console using Dual Enrollment.
2. Go to Profiles > Windows in the SureMDM console.
3. Create a new profile or modify an existing profile already deployed to the device.
4. Open the profile and configure the Restriction policy.
5. Expand General Settings.
6. Locate Allow use of storage card and select one of the following options:

• Not Configured – No changes will be applied to the device.
• Enable – Allows access to storage devices (USB, SD cards, etc.).
• Disable – Blocks access to all external storage devices.

7. Set the option to Disable to restrict storage device usage.
8. Save and deploy the profile to the target devices.

Conclusion

 IT administrators can toggle this setting (Enable/Disable) as needed by updating and redeploying the profile, allowing temporary access when required.

Need more help? Here’s how to get help from our experts. 

CONTACT US