Controlling USB Device Installation and Usage with GP

This step-by-step guide describes how you can control the installation and usage of devices on the computers that you manage. Specifically, in Microsoft ® Windows Server® Code Name "Longhorn" and Windows Vista™ you can apply computer policy to: Prevent users from installing any device. Allow users to install only devices that are on an "approved" list. If a device is not on the list, then the user cannot install it. Prevent users from installing devices that are on a "prohibited" list. If a device is not on the list, then the user can install it. Deny read or write access to users for devices that are themselves removable, or that use removable media, such as CD and DVD burners, floppy disk drives, external hard drives, and portable devices such as media players, smart phones, or Pocket PC devices. This guide describes the device installation process and introduces the identification strings that Windows uses to match a device with the device driver packages available on a computer. The guide also illustrates three methods of controlling device installation. Each scenario shows, step by step, one method you can use to allow or prevent the installation of a specific device or a class of devices. The fourth scenario shows how to deny read or write access to users for devices that are removable or that use removable media. The example device used in the scenarios is a USB storage device. You can perform the steps in this guide using a different device. However, if you use a different device, then the instructions in the guide will not exactly match the user interface that appears on the computer. Read More at: [url]http://technet.microsoft.com/en-us/windowsvista/aa905095.aspx[/url]