2.3.4.1 (L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrator

2.3.4.1 (L1) Ensure 'Devices: Allowed to format and eject removable media' is set to 'Administrators and Interactive Users' (Automated)

Description

Devices: Allowed to format and eject removable media This security setting determines who is allowed to format and eject removable NTFS media. This capability can be given to: Administrators Administrators and Interactive Users Default: This policy isn't defined and only Administrators have this ability.

https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-localpoliciessecurityoptions#devices_allowedtoformatandejectremovablemedialearn.microsoft.com

OMA-URI

./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/Devices_AllowedToFormatAndEjectRemovableMedia

Recommended Setting

Format: chr (string) Value: 0 (Administrators and Interactive Users)

Settings Catalog

YES

Local Policies Security Options

Accounts Block Microsoft Accounts