Tuesday, 29 June 2021

How to Prevent Users to Install Removable Devices in Windows

In the organization we prevent auto installation to secure the system to run malicious file.We have in-build policy to restrict the device Installation.This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.

If you enable this policy setting, Windows is prevented from installing a device whose hardware ID or compatible ID appears in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.

If you disable or do not configure this policy setting, devices can be installed and updated as allowed or prevented by other policy settings. 

We prevent USB or any device auto installation with two method

Method-1 Group Policy setting

Method-2 Registry setting

 

 Method-1 Group Policy setting

Go to Run(Win+R) type gpedit.msc (make sure login with admin account)

Computer configuration->Systems->Device Installation-> Device Installation Restriction

 


 

 Method-2 Registry setting

Go to Run(Win+R) type regedit (make sure login with admin account)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions

DenyRemovableDevices DWORD

(delete) = Enable
1 = Disable



Share:

1 comment:

  1. Harrah's New Orleans - MapyRO
    Harrah's New Orleans is a historic development. 대구광역 출장샵 The historic site 나주 출장안마 was built in the late 1800s 남양주 출장마사지 and was 광주광역 출장샵 part of the city's first casino. 제주도 출장안마 In

    ReplyDelete