how to allow admins to install devices


  • I have configured device installation restrictions by their ID, so I have:

    Computer Configuration/Administrative Templates/System/Device Installation/Device Installation Restrictions:

    -Prevent installation of devices not described by other policy settings (enabled)

    -Allow installation of devices that match any of these device IDs (entered ID of devices inside)

    -Allow Administrators to Override Device Installation Restrictions (enabled)

    Domain administrators are members of local admin on every computer, but with this settings Domain Administrators don't have rights to install devices, when plug any new device eg. USB printer - it showing tray popup that installation is blocked by policy.

    please for help.

    • Edited by zukers Thursday, October 1, 2015 8:41 AM
    Thursday, October 1, 2015 8:40 AM


  • Hi zukers,

    Thanks for the post. The Allow Administrators to Override Device Installation Restrictions setting when enabled, it would allow the local administrators install the hardware they want and regardless the device installation restrictions. So in this way, if you want just block the normal users to install the device, the configration above you set are correct.

    Would you please help to check if there's any other related policy settings you configured which could impact the Device Installation Restriction policy such as Removable Storage Access ?

    You could also run a RSOP report to check.

    Best Regards,


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact

    Monday, October 5, 2015 8:19 AM