none
Allow one single USB, while denying others. RRS feed

  • Question

  • I'm having a little bit of a security issue, and I need to deny all access to my USB ports, so that no one can use the USB ports on my computer, but at the same time, I need to allow ONLY my USB key. I've been fooling around in MMC under: Local Computer Policy/Computer Configuration/AdministrativeTemplates/All Settings: Allow Installation of devices that match any of thse device IDs.

    Adding my hardware ID from my USB key to this did not accomplish anything.

    Any other ideas?

     

    Wednesday, December 15, 2010 3:13 PM

Answers

  • Hi,

     

    As far as I know, if you want to disable USB ports, you could enable or disable USB port in BIOS, but the problem is you cannot use those USB ports for any purpose like connecting USB keyboards or mouse or any devices.

     

    Here, you could set the following policies to check how it works:

     

    1.    First, you should go to “Device Manager” to find out your USB key Hardware ID.

     

    2.    Enter USB key Hardware ID into the Group Policy Setting Computer Configuration –> Administrative Templates –> System –>Device Installation –> Device Installation Restrictions -> “Allow installation of devices that match any of these device IDs”

     

    3.    Within this policy you will want to set it Enable, and then click on the “Show” button to enter your USB key hardware ID.

     

    4.    The other related policy is the Group Policy Setting Computer Configuration –> Administrative Templates –> System –>Device Installation –> Device Installation Restrictions -> “Prevent installation of devices not described by other policy settings”, set it Enable.

     

    Hope it helps.

     

    Alex Zhao


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Friday, December 17, 2010 9:51 AM
    Moderator

All replies

  • Hi,

     

    As far as I know, if you want to disable USB ports, you could enable or disable USB port in BIOS, but the problem is you cannot use those USB ports for any purpose like connecting USB keyboards or mouse or any devices.

     

    Here, you could set the following policies to check how it works:

     

    1.    First, you should go to “Device Manager” to find out your USB key Hardware ID.

     

    2.    Enter USB key Hardware ID into the Group Policy Setting Computer Configuration –> Administrative Templates –> System –>Device Installation –> Device Installation Restrictions -> “Allow installation of devices that match any of these device IDs”

     

    3.    Within this policy you will want to set it Enable, and then click on the “Show” button to enter your USB key hardware ID.

     

    4.    The other related policy is the Group Policy Setting Computer Configuration –> Administrative Templates –> System –>Device Installation –> Device Installation Restrictions -> “Prevent installation of devices not described by other policy settings”, set it Enable.

     

    Hope it helps.

     

    Alex Zhao


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Friday, December 17, 2010 9:51 AM
    Moderator
  • Hi Alex,

     

    thanks in advance.

     

    how can do the same in winxp

     

    Regards,

    Rajesh Kumar

    Monday, July 11, 2011 12:53 PM
  • What about USB devices already installed will there be able to function, cause I want to prevent my USB ports from being accessible and leave out my external hard disk and mouse and deny access to others.

    Basically I want my external hard disk and mouse to be able to use my USB ports only.

    Monday, August 24, 2015 4:12 PM