Restrict only certain USB devices with GPO not working

%3CLINGO-SUB%20id%3D%22lingo-sub-471308%22%20slang%3D%22en-US%22%3ERestrict%20only%20certain%20USB%20devices%20with%20GPO%20not%20working%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-471308%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20hopping%20someone%20could%20point%20me%20in%20the%20right%20direction%20to%20where%20I%20might%20be%20going%20wrong.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%E2%80%99m%20running%20Win10%20LTSB%20and%20looking%20to%20block%20use%20of%20USBs%20except%20certain%20ones.%20I%20have%20a%20GPO%20where%20under%20%E2%80%9CSystem%2FDevice%20Installation%2FDevice%20Installation%20Restrictions%E2%80%9D%20I%20have%20set%20the%20following%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAllow%20administrators%20to%20override%20Device%20Installation%20Restriction%20policies%26nbsp%3B%20-%20%26nbsp%3BEnabled%3C%2FP%3E%3CP%3EPrevent%20installation%20of%20devices%20not%20described%20by%20other%20policy%20settings%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20-%26nbsp%3B%20Enabled%3C%2FP%3E%3CP%3EAllow%20installation%20of%20devices%20that%20match%20any%20of%20these%20device%20IDs%26nbsp%3B%26nbsp%3B%20-%26nbsp%3B%20Listed%26nbsp%3B%20Hardware%20IDs%20and%20Compatible%20IDs%26nbsp%3B%20of%20the%20USBs%20I%20would%20like%20to%20run%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHave%20double%20checked%20RSOP%20that%20the%20GPO%20is%20indeed%20enabled%20and%20picked%20up.%20However%2C%20the%20result%20has%20been%20that%20ALL%20USB%20devices%20are%20blocked.%20%26nbsp%3BHave%20not%20configured%20any%20removable%20drive%20restrictions%20elsewhere.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20wondered%20if%20this%20GPO%20is%20still%20usable%20or%20is%20it%20depreciated%20for%20LTSB%3F%20Does%20anyone%20else%20use%20this%20setting%20and%20it%20works%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20any%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi, hopping someone could point me in the right direction to where I might be going wrong.

 

I’m running Win10 LTSB and looking to block use of USBs except certain ones. I have a GPO where under “System/Device Installation/Device Installation Restrictions” I have set the following

 

Allow administrators to override Device Installation Restriction policies  -  Enabled

Prevent installation of devices not described by other policy settings     -  Enabled

Allow installation of devices that match any of these device IDs   -  Listed  Hardware IDs and Compatible IDs  of the USBs I would like to run

 

Have double checked RSOP that the GPO is indeed enabled and picked up. However, the result has been that ALL USB devices are blocked.  Have not configured any removable drive restrictions elsewhere.

 

So wondered if this GPO is still usable or is it depreciated for LTSB? Does anyone else use this setting and it works?

 

Thanks for any help.

0 Replies