What you need to know
- Microsoft Defender for Endpoint has new device control capabilities to secure removable storage.
- New printer protection options are also in preview for Microsoft Defender for Endpoint.
- Organizations can now use the software to block non-corporate network printers and non-approved USB printers.
Microsoft Defender for Endpoint has new options to secure removable storage on Windows and macOS. Microsoft also has new printer protection capabilities in preview through the software (via Bleeping Computer). The new options should help organizations secure PCs that use external devices.
Microsoft explains that with more people working from home, devices like printers and removable storage have become targets for attackers:
Microsoft Defender for Endpoint already has control protections for device installation, removable storage Endpoint DLP, and removable storage BitLocker. Now, the program also has control capabilities for removable storage access on Windows.
Microsoft explains that "the new feature allows to Audit/Allow/Prevent Read, Write, or Execute access to removable storage based on various device properties, e.g., Vendor ID, Serial Number, Friendly Name, with or without an exclusion."
On Macs, the program can regulate how much access is given to external USB storage devices.
The printer protection feature that's in preview allows organizations to block people from printing from non-corporate network printers or non-approved USB printers.
Microsoft breaks down how to use the new protections in a Tech Community post (opens in new tab).
Printer-related security has been pushed to the forefront due to newly discovered vulnerabilities. The PrintNightmare vulnerability caused several security issues that organizations had to deal with.
Sean Endicott is the news writer for Windows Central. If it runs Windows, is made by Microsoft, or has anything to do with either, he's on it. Sean's been with Windows Central since 2017 and is also our resident app expert. If you have a news tip or an app to review, hit him up at email@example.com.
Get the best of Windows Central in in your inbox, every day!
Thank you for signing up to Windows Central. You will receive a verification email shortly.
There was a problem. Please refresh the page and try again.