Windows 10: GPO "prevent installation of removable devices"

This GPO is under:
computer configuration -> administrative templates -> system -> device installation -> device installation restrictions

If i were to enable this GPO, would USB devices that are already installed still work? Its only for new ones?

Thanks

submitted by /u/user_982396
[link] [comments]

:)

 

Is there anyway i can prevent tethering on win 7?

You could utilize a local policy akin to a domain enterprise GPO that would block USB access via device ID, something like this.

• Click start or go to run, type gpedit.msc.
• This will open the Local Group Policy Editor.
• Go to Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions
• Choose the GPO: Prevent installation of devices using drivers that match any of these device IDs.
• Double click to open.
• Add hardware ID as provided in the example, and choose Enabled. Click OK.
• I would log off or reboot and test after that.

 

Remove Devices

Hi,



Thank you for writing to Microsoft Community Forums.



I understand that you are facing issues while removing the device from your Microsoft account as it keeps popping back after removing.



It could be possible that the device was using OneDrive with the same Microsoft account and that might be the reason you are able to see the device listed under your profile. I would suggest you to remove the device from OneDrive
and see if that helps.



You can follow the steps to remove the device from OneDrive.

1. Login to
   https://onedrive.live.com.
2. Now on the left hand pane click on PC’s.
3. Now click on the devices that are listed under PC’s and on the right hand side click on
   Remove PC.

If the issue persists, please get back to us with the results of the troubleshooting steps to assist you further.



Regards,

Prakhar Khare

Microsoft Community – Moderator

 

Is there anyway i can prevent tethering on win 7?

I did some digging and came across this:

Use Group Policy to prevent the installation of new network devices.

You'll find an option in Administrative Templates \ System \ Device Installation \ Device Installation Restrictions \ Prevent installation of devices using drivers that match these driver setup classes. From its description:

This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device.

If you enable this policy setting, Windows is prevented from installing or updating device drivers whose device setup class GUIDs appear in the list you create. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.​
Using policy settings here, you can either create a whitelist or a blacklist, either of individual devices or entire classes of devices (such as network adapters). These take effect when a device is removed and reinserted, so it will not affect the NIC built into the machine, provided you don't apply the setting to devices that are already installed.

You will need to reference the list of device setup classes to find the class for network adapters, which is {4d36e972-e325-11ce-bfc1-08002be10318}. Add this class to the blacklist, and soon afterward, nobody will be able to use USB network adapters.​
Of course, since he has administrator rights on the machine, there's a chance that he might find your Group Policy setting and delete it. Here's another angle of attack:

• Get/set the password for the local Administrator account.

• If he tethers his phone after you've said "no", issue a remote shutdown command to his PC.
  shutdown /s /m \\boneheads_pc

• Keep doing this until it sinks into his thick head that the house rules apply to him, too.

This will set you up with a battle of wills. I prefer Kursah's solution of revoking his admin privileges.