Home

Block USB Group Policy

How to Block USB Drives in Windows using Group Policy

  1. For example, you can create the Storage-Devices-Restrict domain group and add the computer accounts for which you want to restrict the use of USB drives. This group is specified in your GPP policy in the Item Level Targeting -> Security Group section with the Computer in Group option
  2. In the New GPO dialog, enter Block USB ports as the Name and click OK. Right-click the GPO and click Edit. In the Group Policy Management Editor, you need to choose if you want to deploy the group policy objects through Computer Configuration or User Configuration. Under the relevant configuration, click to expand the Policies folder, the.
  3. Launch the Group Policy Management tool on the domain controller, right click Group Policy Objects, click New. Provide a name to the GPO and click OK. In this example I have named the group policy as Block USB Devices. Right click the policy and click Edit
  4. By default, Group Policy doesn't offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives, and high capacity LS-120 floppy drives. But Group Policy can be extended to use customized settings by applying an ADM template
  5. Open the Group Policy Management Console (gpmc.msc). Right-click on the organizational unit (OU) you want to apply the policy to and click Create a GPO in this domain, and Link it here. Enter a name for the policy (e.g. Block USB Devices) and click OK

There is also security reason, as sometimes people can put confidential data in these devices, which could easily be lost or stolen. Now if organizations wants to avoid such risks, IT administrator can always block USB or removable devices using Group Policy First, you can go to Device Manager to find out your USB key Hardware ID. 2. Enter USB key Hardware ID into the Group Policy Setting Computer Configuration -> Administrative Templates -> System ->Device Installation -> Device Installation Restrictions -> Allow installation of devices that match any of these device IDs 3 You can enable the USB port access and make them working the external drive ports normally anytime by reverting the changes. Change the registry values for USB mass storage devices and disable USB ports. Disable USB removable disks and USB flash drives by using Group and Policy editor. Disable USB ports using the command prompt Disable USB Storage Devices using Group Policy Editor By default, Group Policy does not provide an option to disable USB removable devices, however, we can add such an option using a custom ADM template. Download disable usb storage Administrative Template, or if you want to create it yourself, head over to Microsoft support Enabling Disabling USB Storage. Windows XP. To disable a USB Mass Storage Device. To enable a USB Mass Storage Device. To disable write access to USB Mass Storage Device. Other topics about Using Windows. Windows 7/10 Local Group Policy Editor. Group Policy Editor is a part of Windows operating system that allows you to control your machine

Block USB Ports using Windows Group Policy Object (GPO

Close the Group Policy editor. Restart your computer to complete the task. Once your computer reboots, anyone who connects a USB drive will be denied access to save, edit, or delete any content. Device Management and Installation Step-by-Step Guide: Controlling Device Driver Installation and Usage with Group Policy. Assuming your clients are all Vista or better, you can use this guide to whitelist the set of USB devices your company is deploying and block the rest Also I'd like to recommend you our free software Action1 to block USB. It's a simple USB blocker that works similar to blocking USB via GPO on multiple computers at once or computers that isn't connected to the network all time

The Block USB Access policy will not affect the Domain Administrators or any other connected USB device, such as USB Keyboards, Mouse, Printer, etc In the Group Policy Management console, select your Disable USB Access policy. In the Security Filtering section, add the Domain Admins group. Go to the Delegation tab and click the Advanced in the security settings editor, specify that the Domain Admins group is not allowed to apply this GPO (Apply group policy - Deny) This process allows you to control USB devices, but not nearly as easy to deploy or control compared to the new option by controlling USB drives using Group Policy. For Windows 2000 and XP you will need to modify the permissions of existing files to restrict the installation of USB drives

So, this is all about using the Local Group Policy editor to block access to a USB storage device. I hope this article helped you! Please share it with your friends also. If you have any doubts related to this, let us know in the comment box below USB Drive Setup Blocked By Group Policy I have upgraded my laptop from Windows 8.1 to Windows 10 and I am not able to connect my laptop with my USB Hard Drive. It is showing a message saying that the setup is being blocked by Group Policy The Disable USB Drive screenshot was taken from the Group Policy Management Console. You can open that MMC console from the Administrative Tools folder on your domain controller. Alternatively, you can click Start > Run and type gpmc.msc into the Run box Go to the client machine and. go to start button and type in to search box gpedit.msc. then your group policy window will open. left side of window - search Administrative Templates and double click on it. then click on System. next you will see Removable Storage Access just click on it. then you will see lots of group policy name To disable USB drive write access, select Removable Disk: Deny write access is a computer policy so, on GPME console expand Computer Configuration, then expand Policies, under policies expand Administrative Templates, then expand System, under system click on Deny Write Access. Double click on this policy to open policy settings. 6

KICKR SNAP WHEEL BLOCK – Revolution Cycles Dubai

How To Disable USB Devices Using Group Policy - Prajwal Desa

  1. As a variation to Disable USB Disks, you can prevent users from using any portable USB removable disk or flash drive by using a custom .ADM file that can be imported into the Local Group Policy.
  2. Oct 2, 2017 at 8:33 AM. GPO allows for control over different storage classes, USB and CD/DVD drives are different, and can be controller differently. Perhaps your GPO blocks all storage classes, which is also a setting. Check your policy to see which setting is disabled. If the setting for all storage is enabled, disable that and just block USB
  3. Donate Us : paypal.me/MicrosoftLabDisable USB Devices Using Group Policy in Windows Server 20191. Prepare- DC31 : Domain Controller(Yi.vn) | WIN101 : Cl..

Use Group Policy to disable USB, CD-ROM, Floppy Disk, and

BitLocker Group Policy settings can be accessed using the Local Group Policy Editor and the Group Policy Management Console (GPMC) under Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption. Most of the BitLocker Group Policy settings are applied when BitLocker is initially turned on for a drive In this video i will show you How to Disable USB Devices Using Group Policy in Windows Server 2012 R In this tutorial we'll show you 2 ways to block read/write access to USB/CD drive in Windows 10, 8 and 7. Method 1: Using Group Policy. Open up the Run box by press the Windows key + R. Type gpedit.msc and press Enter. When the Local Group Policy Editor opens, navigate to the following location Restrict / Disable USB Read and Write Access via Group Policy. We are going to look at two ways to disable USB device Read and Write access in Windows 10. Windows comes with Group Policies that control the working environment for Users and Computer accounts. You can easily control your USB device's permissions by configuring a group policy

Group Policy method; Device Manager method; 1] Disable USB Ports in Windows via GPO. To make things easier, Windows has a dedicated Group Policy Object that disables the USB ports. Well, not necessarily disabled outright but blocks the read and write access. Once those two things are blocked, the USB storage devices are essentially disabled Block USB drive via Group Policy but keyboard, mouse, printers and USB Datacard work Windows 7 machine how to enable a policy in Usb drive disable but keyboard mouse printers and usb datacard work. This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread Group Policy..Block USB HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers Step-by-Step Guide to Controlling Device Installation Using Group Policy. Now then: from one of your Active Directory Domain Services domain controllers or from an administrative workstation, open the Group Policy Management Console and link a.

Restrict / Disable USB Read and Write Access via Group Policy. We are going to look at two ways to disable USB device Read and Write access in Windows 10. Windows comes with Group Policies that control the working environment for Users and Computer accounts. You can easily control your USB device's permissions by configuring a group policy We have a server 2012 R2 domain which already has a GPO to deploy the power policy. The plan is set to active yet there are no USB settings for power. I need to disable selective USB suspend as there are USB devices that need to be on all the time yet I cannot figure out how to do so Restrict USB devices by using Intune Administrative Templates. 08/27/2020; 4 minutes to read; h; In this article. To prevent malware infections or data loss in your organization, you may want to block certain kinds of USB devices, such as a USB flash drive or camera, and allow other kinds of USB devices, such as a keyboard or mouse

Video: How to use a Group Policy Object to block access to USB

Block USB or Removable Devices using Group Polic

1. Use Local Group Policy Editor To Restrict Removable Storage Access. 2. Block USB Using The Device Manager To Disable USB Port. 3. Use The Registry Editor To Restrict Access To Removable Storage Device. 1. Use Local Group Policy Editor To Restrict Removable Storage Access. Windows 10 Pro users who either have an Education or Enterprise. The policy to disable USB access is found in Group Policy Management Editor \ User Configuration \ Administrative Templates \ System \ Removable Storage Access \ All Removable Storage classes: Deny All Access. Enabling this policy (linked to your desired OU) will block all removable storage devices, i.e., USB Sticks, DVD Drive's 1. Disable USB Drives Using Group Policy. If you are using the Professional version of Windows 10, you can disable USB Drives on your computer using Group Policy Editor. 1. Right-click on the Start button and click on Run. 2. On the Command screen, type gpedit.msc and click on OK. 3 Unfortunately, some AD group policy (GPO) settings are not preferable. As a local administrator on a machine, there is a way to prevent Group Policy from affecting your computer. You must be a local administrator on your machine to affect these changes. Caution: changing registry settings may be detrimental to the health of your computer

Expand USB Controllers. Right-click on all entries, one after another, and click Disable Device. Click Yes when you see a confirmation dialog. 4. Disable or Enable Usb Ports in BIOS. Some manufacturers offer an option in BIOS / UEFI to disable or enable USB ports. Download the BIOS / UEFI and check if there is an option to disable or. We can disable cd rom & USB in Windows XP as well as 2003. CD Rom you can disable by using group policy. USB you can disable using registry.. In registry one USB HUB is ther . From there you can remove Everyone permission. SO it willl work properly. So u can disable mass storage like thumb drive. as well as u can use USB mice. Thanks Vipin Vijaya in this video i want to show all of you about : How to Disable USB Using Group Policy Managemen We block usb drives except for the machines that need them. We also stop autostart company wide, so if you have a machine that needs that drive, it won't just run any executable on it, you have to go in and select it

Group Policy Allowing certain USB stick but Deny ALL other

Unblock USB Port to Enable External USB Mass Storage

Disable USB Storage by Using the Group Policy Editor. To disable the USB storage by using the Group Policy Editor, open Run. Once it's open, type gpedit.msc. On the left pane click on Computer Configuration -> Administrative Templates -> System -> Removable Storage Access Initially, you have to configure Group Policy Editor to disable USB storage access in Windows 10. To programmatically configure GPO and block only specific USB devices—to continue using mouse, keyword, and other devices— apply the setting for an entire domain or choose an active directory container (OU) where you want to deny access Securing USB both at computer and at user level can be achieved using a few endpoint management solutions, but if you are looking for one ManageEngine Desktop Central would be a right choice. This USB security feature enables administrators to centrally control the usage of various USB devices in the network by blocking/disabling the USB devices to prevent unauthorized download and upload. Use Group Policy to Disable Client Drive Redirection. You can disable client drive redirection by configuring a Microsoft Remote Desktop Services group policy setting for remote desktops and RDS hosts in Active Directory. For more information about client drive redirection, see the Using VMware Horizon Client document for the specific type of.

Disable USB Storage: Registry, Group Policy, or Software

  1. In this video i will show you How to Disable USB Drive Write Access using Group Policy in Windows Server 2012 R2 Active Directory
  2. Microsoft Support: HOWTO: Use Group Policy to disable USB, CD-ROM, Floppy Disk and LS-120 drivers. Thankfully there is also a registry key in Windows XP that allows you to block the use of USB storage devices. Now there are two ways to prevent USB storage devices so you may want to implement either or both methods in your organisation. First.
  3. That's what group policy objects (GPO) are for. Suggestions? Mark Heitbrink describes how to disable USB storage devices entirely on all or some computers in the network. He employs an ADM template in a group policy object that disables the USB storage driver (USBSTOR)
  4. istrative Templates > System > Device Installation > Device Installation Restriction
  5. On the Group Policy Management screen, locate the folder named Group Policy Objects. Right-click the Group Policy Objects folder and select the New option. Enter a name for your new policy. In our example, the new GPO was named: FORCE USB ENCRYPTION. On the Group Policy Management screen, expand the folder named Group Policy Objects
  6. Client USB device optimization rules can be applied to devices to disable optimization, or to change the optimization mode. When a user plugs in a USB input device, the host checks if the USB policy settings allow the device. If the device is allowed, the host then checks the Client USB device optimization rules for the device. If no rule is.
  7. AFAIK you can only block USB device types - not specific devices, and only during driver installation. You might be able to find a 3rd-party utility, but I couldn't find one anywhere. Also, there seem to be no unique ID for USB drives, so even writing something on your own would prove difficult.. In conclusion, the closest thing would be writing some event-triggered script that would look for.

Hello All, I want to disable the usb removable storage of the network computers (domain and non-domain) from my computer. But i need powershell script which will disable the usb removable storage of mentioned computer list but through the local group policy not thorough regedit of that computer also not through the GPO which is in server OS In many companies, it is a common practice to block USB devices across the board or at least ban certain types of devices. If you don't want to use third-party tools for this purpose, then this goal can also be achieved with certain limitations via group policies

It's quite simple to disable removable media access. Learn how to deploy a Windows Server 2008 Group Policy configuration through a Group Policy object. While USB drives and other portable media. After the prerequisites are installed, follow these steps to disable Autorun. How to use Group Policy settings to disable all Autorun features in Windows Server 2008 or Windows Vista. Use either of the following methods: Method 1. Click Start, type Gpedit.msc in the Start Search box, and then press ENTER As a result, we can change the setup to repair this problem. Step 1: Press Windows + R to invoke Run dialog. Type gpedit.msc and press Enter key to open the Group Policy window. Step 2: Expand User Configuration > Administrative Templates > System 3 To Disable Access to All Removable Storage Devices. A) Click/tap on the Download button below to download the file below, and go to step 4 below. 4 Save the .reg file to your desktop. 5 Double click/tap on the downloaded .reg file to merge it. 6 When prompted, click/tap on Run, Yes ( UAC ), Yes, and OK to approve the merge This is another article I have written that address's the commonly asked question on the Group Policy forum as to how you can use group policy to block or allow users to specific web site URL's. It goes without saying that the most effective way to implement content filtering for the internet is to maintain list of sites on your proxy server/firewall in your organisation

USB Keyboard setup blocked by group policy I tried updating my drivers using the program 'Tweakbit Driver Updater', due to the fact that I keep experiencing game crashes and varying BSODs, and after successfully updating my drivers and restarting my computer, my Keyboard is suddenly disconnected and when I unplugged and plugged it back. Second, set the following Group Policy on the user's local device: Navigate to Computer Configuration > Policies> Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Connection Client > RemoteFX USB Device Redirection. Select Allows RDP redirection of other supported RemoteFX USB devices from this computer Using Group Policy Editor Using Registry Editor Let's see the topics in detail. Block USB Storage Devices Using Group Policy Editor: Open Run command by pressing Windows + R and type gpedit.msc and hit enter this will open the Group Policy Editor. Now Navigate to the following path To block a Thunderbolt controller on a device running an earlier version of Windows, or for platforms that lack kernel DMA protection for Thunderbolt 3, refer to the Prevent installation of devices that match these device IDs section under Group Policy Settings for Device Installation on the previously mentioned website

Disable AutoRun and AutoPlay at Group Policy Level If you want to control AutoRun and AutoPlay settings, you can simply do it with Group Policy editor. Before you start executing the step by step guide, make sure you have logged in to the Windows 10 system as an Administrator for accessing Group Policy editor Please also note that the permissions in the Delegation tab must match the NTFS permissions assigned to the policy directory in the SYSVOL folder. Block Inheritance and Enforcement in Group Policy Link. Inheritance is one of the main concepts of GPO. By default, high-level policies are applied to all nested objects in the domain hierarchy

Steps to Obtain a USB policy report: You can generate a report on block/unblock status based on the device type. For this, copy the query text here and go to Reports > Query Reports > New Query Report. Paste the text in the query field and Run the report. This will show you the list of blocked and unblocked devices I Want disable USB and CD drive in Group Policy I want disable USB and CD Drive in Group Policy. I applied Group policy. It has blocked USB, CD and other all local drive (example D,E) This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread.. Let's start How to disable USB Devices using Group Policy. Step 1 :- Launch the Group Policy Management tool on the domain controller, right click Group Policy Objects, click New.Give name of GPO and Click On.Example i have assign name of GPO as Block USB Devices. Step 2 :- Right-click the policy and click Edit

GPO - Disable USB storage devices. Would you like to learn how to configure a group policy to disable the use of USB storage devices? In this tutorial, we will show you how to deny access to USB external storage devices using a GPO. • Windows 2012 R2. • Windows 2016. • Windows 2019. • Windows 10. • Windows 7 How to get access to the USB, it is blocked by the group policy. The value under the USBSTOR is 3 for hexadecimal. How can I enable the USB if its blcked by Group Policy? The USB does show under the device manager, but there is a red cross over it. When I right click and enable the device it gets enable for a moment and get disable again Right-click the Usbstor.inf file, and then click Properties. Click the Security tab. In the Group or user names list, add the user or group that you want to set Deny permissions for. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control. In the Group or user names list, select the SYSTEM account

Understanding "Red Forest" - The 3-Tier ESAE and

I'd create a GPO for each device type to be managed, e.g. Block USB Storage Access, Block Floppy Access and Block CD-ROM Access. Using GPO filtering, I'd prevent the Apply Policy permission for each group for the appropriate policy, e.g. the Floppy Access group would be prevented from applying the Block Floppy Access Policy We are looking for a solution to block mass storage devices except those that are approved by us. We setup group policy with a white list to block USB drives, but it covers all USB devices and is becoming a huge pain to manage all new and old GUIDs of keyboards, mice, and other none mass storage Go to cmd and type Gpupdate /force and once the policy is updated restart the system once.. Disable USB write Access using Group Policy editor: Open run command by pressing windows + R and type gpedit.msc and hit enter this command will open the Group Policy Editor.. Navigate to the Following Path: Computer Configuration > Administrative Templates > System > Removable Storage Acces To Turn On or Off USB Selective Suspend Setting in Command Prompt. 1 Open a command prompt. 2 Enter the command (s) below you want to use into the command prompt, and press Enter. (see screenshots below) (On battery: Enabled) - Default. powercfg /SETDCVALUEINDEX SCHEME_CURRENT 2a737441-1930-4402-8d77-b2bebba308a3 48e6b7a6-50f5-4782-a5d4. As a variation to Disable USB Disks, you can prevent users from using any portable USB removable disk or flash drive by using a custom .ADM file that can be imported into the Local Group Policy (thus effecting only the local computer) or by using Active Directory-based Group Policy Objects (also known as GPOs). Follow the steps outlined i

Step 1: Right-click on the Start button on the taskbar and then click Device Manager to open the same. Step 2: Expand Universal Serial Bus Controllers. Right-click on all entries one-after-another and then click Disable device option. Click Yes button when you see the confirmation dialog. Method 3 of 5 To disable removable storage access on Windows 10, use these steps: Open Start. Search for gpedit.msc and click OK to open the Local Group Policy Editor. Browse the following path: Computer. Notes - This policy will take effect for new sessions and it will be applied to everyone who accesses this server with RDP and V2 Cloud clients, to make sure policy applies please reboot your server, or open a command prompt and run gpudapte /force. - This policy will block access to redirected USB and network drives

http://www

Disabling-Enabling USB Mass Storage Devic

How to enable write protection for USB devices on Windows

I know there is a GPO to disable the abiity to use all USB storage devices, and it works great. But is there a setting where i can only allow a certain brand or type of USB storage device By design though, this option is not available in an obvious place like the Control Panel, it's not even available in the Group Policy Editor. It's a switch inside a registry key in the registry. Here's how to disable (and re-enable) write access to removable storage devices such as USB pen sticks and portable hard drives Blocking removable media. One of the most convenient ways to block outside media is to edit Group Policy Objects.. Press the Windows key.; In the search box that appears, type Edit group policy, and then press Enter.; Under User Configuration, double-click Administrative Template to expand the menu.; In the drop-down menu that appears, select System, and then Removable Storage Access Option 1 - Apply Group Policy. Hold down the Windows Key and press R to bring up the Run dialog box.; Type gpedit.msc, then press Enter. . The Group Policy Editor appears.; Expand User Configuration > Administrative Templates, then select System. Open the policy Don't run specified Windows applications. Set the policy to Enabled, then select. Go to Security tab and select the desired user or group in Group or user names list which you want to restrict from using USB drives. Now in Permissions for Users list, click on Deny checkbox next to Full control option and then click on OK

windows - Restrict access to certain USB drives - Server Faul

LondonWeed

Reboot the system and see the result. Plug a USB to your computer and test the settings you have applied through group policy. Remember: In order to apply Restrict access to removable devices policy to specific user or group, configure it from User Configuration of Group Policy settings After implementing any of theses, you remove the write access to USB ports but still you can read data from them as you normally do. Make USB Storage Read-Only Using Group Policy Editor. Open Windows Run dialog by pressing Win + R keys together. Type in gpedit.msc and press Enter to open Group Policy Editor With JumpCloud's Policies feature, admins can easily and quickly set a policy to disable the ability to connect a USB storage device into an end user's Mac. This policy can be set via the centralized cloud directory solution, and subsequently enforced. End users will no longer be able to attach a USB storage device to their Mac, and you. Right-click the OU and click the link current GPO. Step 5:- From the list select the USB policy GPO Block USB devices and click OK. Step 6:- An upgrade of the group's policy on the client using the gpupdate / force command. Connect any USB device to your computer and you should see the message as access is denied

I have windows server 2003 AD, running 2008 schema. i setup a policy to block write to cd/dvd drives, and USB drives. i set a group to exclude am list of users from this policy, but all the W7 pcs are applying it anyway. XP, and 2K machines are honoring the exclude. Please help!! Disable Adding USB Drive and Memory Sticks via Group Policy and Group Policy Preferences tagged Dan Stolts / Group Policy / GURU-Tip / Security / Windows / Windows Server 2008 If you do not have Group Policy Preferences installed see Install Group Policy Preferences Block USB drives Creating the Endpoint Security Device Control Profile. This section will show you how to implement an overall policy to block USB drives within Microsoft Intune in their entirety, to get started, log into the MEMAC portal, navigate to Endpoint Security, under manage, select Attack surface reduction and Create Policy

Disable BitLocker on removable drives with Group Policy Note that sometimes it is unclear what counts as removable and what is considered a fixed drive. For instance, SATA drives with AHCI that support hot swapping might be considered as removable drives by BitLocker even if they are internal drives wrote a script for a customers network administrator to enable and disable access to removable storage. In the example below I used the registry keys for the Removable Disks: Deny write access and Removable Disks: Deny read access Group Policy Objects. It is easier to fix this with Group Policy if the computers are domain joined, you can set the policy in Computer Configuration. Or, vice versa, you want to prevent users of desktop Windows 10 editions from restarting the computer that fulfills some server function. In this case, just remove Users group from Shut down the system local policy.. In the same way you can prevent (or allow) shutdown/reboot for all computers in the specific OU of your Active Directory domain using the domain policy

Start typing 'group policy' or 'gpedit' and click the 'Edit Group Policy' option. What Can You Do With Group Policy Editor. A better question would be, what can't you do with Group Policy Editor! You can do anything from set a desktop wallpaper to disable services and remove Explorer from the default start menu How to Prevent Users From Installing Printers. Certain editions of Windows 8 -- Windows 8 Pro and Windows 8 Enterprise, to be specific -- allow administrators to manage settings for all of the users on a single computer via group policies. You can configure a specific policy in Local Group Policy Editor to prevent. Plug the external USB keyboard in your laptop to check that it actually functions and is compatible with your laptop.; Ensure that you are running Windows 10 Pro or Enterprise as the Local Group Policy Editor is only available for these variants.Changing local group policies isn't very risky, but it's not risk-free either 5 Ways to Access Local Group Policy Editor on Windows 10. You can access the Local Group Policy Editor (see the following picture) on your Windows 10 computer with the help of Run, Search, Start Menu, Command Prompt and Windows PowerShell. For more info, please keep on reading. If you usually use Local Group Policy Editor, I recommend you create Local Group Policy Editor Shortcut on Desktop In some cases, customers need to allow or block determined devices when user trying to connect a usb thumb drive into Virtual Machine or Application Virtualization. This is a tradicional question which I receive from lots of people. This post will explain how is the best way to configure simple tasks to allow/block USB device

How to restrict USB storage device without affecting USB

First fire up Group Policy Management from the Tools menu in your Server Manager and make a new Group Policy Object or use an existing one. Go to Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Software Restriction Policies and right click it to open a menu where you choose New Software Restriction Policies Posted January 17, 2013. I am attempting to block all removable USB storage devices, which is complete, but I am trying to allow certain devices to be installed. I was hoping i could do this by Hardware ID, but it appears if I have two thumb drives of the same brand both items will work since they share the same Hardware ID