none
Alle USB Ports und Geräte sperren bis auf eine Ausnahme RRS feed

 > 

  • Frage

  • Question
    Anmelden
    0
    Anmelden

    Hallo.

    Server: Windows Server2012R2
    Clients: Windows 8.1

    per GPO soll der Zugriff auf alle USB Ports gesperrt werden.
    (Sticks / Cardreader usw.).

    Nur für das Übertragen von Videofiles (P2-Karten) sollen
    2 Kartenleser (per GUID wenn möglich) erlaubt werden.

    Ich finde leider immer nur Anleitungen wo GUID's verboten
    werden.

    Vielen Dank im voraus für die Unterstützung

    Donnerstag, 26. März 2015 11:35
    |

Antworten

  • Question
    Anmelden
    1
    Anmelden

    Hallo Axel,

    schauen Sie sich diesen Artikel an: Device Management and Installation Step-by-Step Guide: Controlling Device Driver Installation and Usage with Group Policy

    Und Bitte beachten diese Absätze:

    "

    • Allow installation of devices that match any of these device IDs. This policy setting specifies a list of Plug and Play hardware IDs and compatible IDs that describe devices that users can install. This setting is intended to be used only when the Prevent installation of devices not described by other policy settings policy setting is enabled and does not take precedence over any policy setting that would prevent users from installing a device. If you enable this policy setting, users can install and update any device with a hardware ID or compatible ID that matches an ID in this list if that installation has not been specifically prevented by the Prevent installation of devices that match these device IDs policy setting, the Prevent installation of devices for these device classes policy setting, or the Prevent installation of removable devices policy setting. If another policy setting prevents users from installing a device, users cannot install it even if the device is also described by a value in this policy setting. If you disable or do not configure this policy setting and no other policy describes the device, the Prevent installation of devices not described by other policy settings policy setting determines whether users can install the device.

    • Allow installation of devices using drivers for these device classes. This policy setting specifies a list of device setup class GUIDs that describe devices that users can install. This setting is intended to be used only when the Prevent installation of devices not described by other policy settings policy setting is enabled and does not take precedence over any policy setting that would prevent users from installing a device. If you enable this setting, users can install and update any device with a device setup class that matches one of the device setup class GUIDs in this list if that installation has not been specifically prevented by the Prevent installation of devices that match these device IDs policy setting, the Prevent installation of devices for these device classes policy setting, or the Prevent installation of removable devices policy setting. If another policy setting prevents users from installing a device, users cannot install it even if the device is also described by a value in this policy setting. If you disable or do not configure this policy setting and no other policy setting describes the device, the Prevent installation of devices not described by other policy settings policy setting determines whether users can install the device.

    "

    Gruß,

    Teodora

    Bitte haben Sie Verständnis dafür, dass im Rahmen dieses Forums, welches auf dem Community-Prinzip „IT-Pros helfen IT-Pros“ beruht, kein technischer Support geleistet werden kann oder sonst welche garantierten Maßnahmen seitens Microsoft zugesichert werden können.


    Freitag, 27. März 2015 10:01
    |
    Moderator