 |
 |
 |
Windows Longhorn: Using Group Policy to Control Device Management (Part 2)
Friday, September 1st, 2006
Just in case you missed part 1 of this article series, the group policy settings that I am 
discussing are unique to Windows Longhorn Server. These group policy settings can be used to secure workstations that are running Windows vista. However, these settings have no effect on systems running Windows XP, Windows Server 2003, or older versions of Windows. You can find the group policy settings that I will be discussing in the group policy tree at: Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions.
Preventing Installation of Removable Devices
As the name of this policy setting implies, the Prevent Installation of Removable Devices setting prevents users from installing removable devices. This policy is primarily designed to prevent users from attaching USB or Firewire based devices to their systems.
Prevent Installation of Devices Not Described By Other Policy Settings
The Prevent Installation of Devices Not Described by Other Policy Settings group policy setting is kind of a catch all setting. There are a couple of different ways that you can use this policy setting. One thing that you can do is to enable this setting, but not enable any other hardware installation related settings. In doing so, you will effectively prevent anyone from installing any hardware into systems to which the policy applies.
Another thing that you can do with this group policy setting is to use other policy settings to allow specific devices based on device ID or class and then enable this policy setting. In doing so, you will prevent the installation of any device that you have not specifically allowed users to install. Windows Longhorn: Using Group Policy to Control Device Management (Part 2)
Popular Posts
Please read our Disclaimer
