The company reasons that the work-from-anywhere environment has widened the attack surface area, which has led it to expand the scope of the enterprise version of its Windows 10 Defender protection product.
“We are excited to announce new device control capabilities in Microsoft Defender for Endpoint to secure removable storage scenarios on Windows and macOS platforms and offer an additional layer of protection for printing scenarios,” wrote Tewang Chen, a Technical Program Manager at Microsoft.
- Protect your devices with these best antivirus software
- Here's our list of the best external hard drives around
- We've built a list of the best portable SSDs around
The new capabilities are designed to allow administrators to exercise access restrictions on removable devices and reign in printing tasks on non-corporate or non-approved printers.
Furthermore, the new removable storage access control capabilities added to the Windows version of the security platform complement the existing device control protections for tasks such as installing a new device, removing BitLocker storage, and others.
With the new removable storage access control, admins will be able to audio, allow, or prevent the read, write, or execute permissions to removable storage based on various device properties, such as Vendor ID and serial number.
Furthermore, the platform now offers removable storage protection on Mac as well. This adds to the endpoint platform growing capabilities on Mac. Notably, last month Microsoft added support for detecting jailbroken iOS devices to the product.
Chen added that while removable storage access control on Windows and removable storage protection on Mac are generally available, printer protection on Windows is currently available as a public preview.
- Also take a look at these best flash drives