Get Mozilla Firefox
To improve corporate IT security, it may be useful to be able to prohibit the connection of uncontrolled devices such as USB flash drives to user workstations. Viruses can originate from these devices if they have been used on unsecured computers. It may therefore be a good idea to be able to control the devices you wish to authorize to connect to your machines.
Some antivirus programs provide this feature, but it's also possible to do so via Windows Group Policies.
In this article, we'll look at how you can set this up in an Active Directory environment.
There are two rules we can use to manage our USB flash drives. Let's see the main differences between them and how to configure them…
⚠️It's important to note that this will prevent the installation of all new devices, not just USB sticks, so be careful when restoring the system from a backup to a new machine/device as Windows won't boot (as it won't be able to install drivers for new devices).⚠️
Unlike the Prevent all removable media rule, here we can add exceptions (whitelist) for devices we want to be able to use. To do this, we can use device IDs or device instance IDs.
As we saw above, previously installed USB drives will still be available despite the policy rules. To avoid this, we need to remove the devices. To do this, we have two options, from the Windows Device Manager console or from the USBDview software.
Contact :
