none
Group Policy Allowing certain USB stick but Deny ALL other USB devices?

    Question

  • Is this possible?

    I have "Allow installation of devices that match any of these device IDs" enabled.  How do I disable all other USB devices?

    Thank you!

    Thursday, April 30, 2015 11:48 PM

Answers

  • Hi,
    Thanks for posting here.
    If you want allow users to install only devices that are on an "approved" list. If a device is not on the list, then the user cannot install it. You can achieve this via group policy.
    Here, you could set the following policies to check how it works:
    1.    First, you can go to “Device Manager” to find out your USB key Hardware ID.
    2.    Enter USB key Hardware ID into the Group Policy Setting Computer Configuration –> Administrative Templates –> System –>Device Installation –> Device Installation Restrictions -> “Allow installation of devices that match any of these device IDs”
    3.    Within this policy you will want to set it Enable, and then click on the “Show” button to enter your USB key hardware ID.
    4.    The other related policy is the Group Policy Setting Computer Configuration –> Administrative Templates –> System –>Device Installation –> Device Installation Restrictions -> “Prevent installation of devices not described by other policy settings”, set it Enable.

    Also you can check the below link for more reference:
    https://technet.microsoft.com/en-us/library/cc731387%28WS.10%29.aspx?f=255&MSPPError=-2147217396

    Hope it helps.
    Best Regards,
    Elaine



    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Tuesday, May 5, 2015 3:14 AM
    Moderator