Defender Attack Surface Reduction is a good choice for USB restrictions, because it will report back to Defender and give a good audit if users are attempting to repeatedly write data out … Continue reading USB Security Using Microsoft Defender for Endpoint