Author: admin
Prevent redirection of devices that match any of these device Ids
This policy setting prevents redirection of specific USB devices. If you enable this setting an alternate driver for the USB device cannot be loaded. If you disable or do not configure this setting an alternate driver for the USB device can be loaded.
Prevent redirection of USB devices
This policy setting prevents redirection of USB devices. If you enable this setting an alternate driver for USB devices cannot be loaded. If you disable or do not configure this setting an alternate driver for USB devices can be loaded.
Code signing for device drivers
Determines how the system responds when a user tries to install device driver files that are not digitally signed. This setting establishes the least secure response permitted on the systems of users in the group. Users can use System in Control Panel to select a more secure setting but when this setting is enabled the system does not implement any setting less secure than the one the setting established. When you enable this setting use the drop-down box to specify the desired response. — “Ignore” directs the system to proceed with the installation even if it includes unsigned files. — “Warn” notifies the user that files are not digitally signed and lets the user decide whether to stop or to proceed with the installation and whether to permit unsigned files to be installed. “Warn” is the default. — “Block” directs the system to refuse to install unsigned files. As a result the installation stops and none of the files in the driver package are installed. To change driver file security without specifying a setting use System in Control Panel. Right-click My Computer click Properties click the Hardware tab and then click the Driver Signing button.
Allow non-administrators to install drivers for these device setup classes
This policy setting specifies a list of device setup class GUIDs describing device drivers that non-administrator members of the built-in Users group may install on the system. If you enable this policy setting members of the Users group may install new drivers for the specified device setup classes. The drivers must be signed according to Windows Driver Signing Policy or be signed by publishers already in the TrustedPublisher store. If you disable or do not configure this policy setting only members of the Administrators group are allowed to install new device drivers on the system.
Display a custom message when installation is prevented by a policy setting
This policy setting allows you to display a custom message to users in a notification when a device installation is attempted and a policy setting prevents the installation. If you enable this policy setting Windows displays the text you type in the Detail Text box when a policy setting prevents device installation. If you disable or do not configure this policy setting Windows displays a default message when a policy setting prevents device installation.
Display a custom message title when device installation is prevented by a policy setting
This policy setting allows you to display a custom message title in a notification when a device installation is attempted and a policy setting prevents the installation. If you enable this policy setting Windows displays the text you type in the Main Text box as the title text of a notification when a policy setting prevents device installation. If you disable or do not configure this policy setting Windows displays a default title in a notification when a policy setting prevents device installation.
Time (in seconds) to force reboot when required for policy changes to take effect
This policy setting establishes the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in device installation restriction policies. If you enable this policy setting set the amount of seconds you want the system to wait until a reboot. If you disable or do not configure this policy setting the system does not force a reboot. Note: If no reboot is forced the device installation restriction right will not take effect until the system is restarted.
Prevent installation of devices not described by other policy settings
This policy setting allows you to prevent the installation of devices that are not specifically described by any other policy setting. If you enable this policy setting Windows is prevented from installing or updating the device driver for any device that is not described by either the “Allow installation of devices that match any of these device IDs” or the “Allow installation of devices for these device classes” policy setting. If you disable or do not configure this policy setting Windows is allowed to install or update the device driver for any device that is not described by the “Prevent installation of devices that match any of these device IDs” “Prevent installation of devices for these device classes” or “Prevent installation of removable devices” policy setting.
Prevent installation of removable devices
This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. This policy setting takes precedence over any other policy setting that allows Windows to install a device. If you enable this policy setting Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting Windows can install and update device drivers for removable devices as allowed or prevented by other policy settings.
Prevent installation of devices that match any of these device IDs
This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is prevented from installing. This policy setting takes precedence over any other policy setting that allows Windows to install a device. If you enable this policy setting Windows is prevented from installing a device whose hardware ID or compatible ID appears in the list you create. If you enable this policy setting on a remote desktop server the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting devices can be installed and updated as allowed or prevented by other policy settings.