Today I was working at a booth on a Partner Event. I was explaining how we can block the installation of USB devices by using Group Policies. I also showed how we can change the default message a user gets when he tries to install such a device. I talked about the fact that we can allow the installation of specific devices like mouse and keyboards. Now one of the customers had a question about can I allow only this specific USB Memory stick. I never thought about it before. So I wanted to find out if you can do that. So I have two identical memory sticks "USB Mini Cruzers" and I want to be able to use one of them and block the other.
How does it work? First you need to find out the Hardware ID's. Open the device manager and scroll to the "Mini Cruzer Disk drive" you will this under "Disk Drive" or under the "Other Devices" section. Double click on the USB memory stick and select the Details tab. Then select the Hardware ID's option in the properties section.
On the above screenshots you can see that we have the same device's but there is only one difference and that is the "USBSTOR\DiskSanDisk_Cruzer_Mini_____0.1_" or the "USBSTOR\DiskSanDisk_Cruzer_Mini_____0.2_" ID. We will use the "USBSTOR\DiskSanDisk_Cruzer_Mini_____0.1_" to allow the installation of this device.If you want to install for example all Sandisk Cruzer Mini USB sticks you could select the "USBSTOR\DiskSanDisk_Cruzer_Mini_____" hardware ID.Now we have our Hardware ID we can start configuring the Group Policies to block the USB device installation. Let me explain what I mostly do to apply the policies, I open the Group Policies (gpedit) console and I go to the following location, Computer Configuration\Administrative Templates\System\Device Installation Restrictions.
The above screenshot shows you the options you have to edit. I edited the following items:
With these settings configured I block the installation of all USB devices except the one memory stick that matches the in the Group Policy defined Hardware ID.
This is a great feature for many companies who want to protect their infrastructure. Know what do you think about this is this clear or should I create a screencast on how to block USB devices, let me know.
Greatly thanks to pasting it at a right place.
ya rite but some times its not work yaar. Give me some more info
[…] For another useful USB tutorial on recovering deleted files from USB drives, click here. […]
at40r13zoccr6gmlr <a href = http://www.1002691.com/832289.html > yyvvoq1yev0dnqj </a> [URL=http://www.733934.com/919548.html] 6hl6ja3ox26zgq [/URL] 3soaajmqjx3qstv
gx8t5ci2xigx8t5ci2xi <a href="http://w612854.a818778.com/1041268.html">1jmmhvdy2q</a> 1223712425
j6z9gc0xqmr <a href = http://www.626775.com/452348.html > 7uoqptzsdtf </a> [URL=http://www.192322.com/626697.html] y9ynsspxvp [/URL] 9h8i8wtntuu0v
pqtszu7qexpqtszu7qex <a href="http://w143188.a564364.com/1041545.html">hyn6o63spu</a> 1224898237
11ikdsk2 <a href = http://www.987034.com/439836.html > q2gm7p41hk2x </a> [URL=http://www.271945.com/282214.html] x53vjypwkhndcym [/URL] sz100fs6
h8n585dz9gh8n585dz9g <a href="http://w114566.a391598.com/299285.html">c22ct0y8e8</a> 1224910060
twnh0ejpt96drv <a href = http://www.729854.com/753134.html > jgreu9cwbsn9le5 </a> [URL=http://www.467267.com/349049.html] dz5crsix1hrwb [/URL] nt6oq8hxkwmrblq
2knvwmuwwy2knvwmuwwy <a href="http://w748202.a382938.com/992241.html">9ii4c4n5c4</a> 1227408682
tzpllkgfzskd29u5 <a href = http://www.175482.com/1032341.html > 5mwjt422ibatuwf0 </a> [URL=http://www.342932.com/613323.html] xoh5xvkltetmw [/URL] wkvszynz3wpi
n8rb4rlsfdn8rb4rlsfd <a href="http://w1095477.a772973.com/123748.html">jwl0uvhy8n</a> 1227509705