ASR : Device Control - SD Card Readers

Device Configuration

Afternoon all,

For whatever reason I always have trouble with device control, hoping someone can point my in the right direction. Current configuration is:

Device control enabled
Default enforcement Deny

Device control policy:
Read all devices - tied to entra group
Read/write all devices - tied to entra group
Read Specifc devices - tied to entra group
Read/write specific devices - tied to entra group

Policy is working as expected except for specific USB SD card readers. I cannot get these working on any identifier, I have used threat hunting to identify the ID’s but these are still being blocked. I have tried using the upstream vid_pid for the reader but I still cannot get them to work.

Has anyone got these type of devices to work?

Thanks in advance.

Posted May 5, 2026, 5:23 PM UTC

20
Loading comments…