Device installation restriction GPO does not work

Hi experts.

I just tried to setup a GPO: "Prevent Installation of a Device by Device Setup Class" as seen in https://technet.microsoft.com/en-us/library/cc732192(v=ws.10).aspx or https://davidzou.com/articles/windows/defend-against-badusb
In particular, I am trying to block the installation of network adapters, GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
It does not seem to work, not on win7, not on win8.1, nor on win10 - although the policy is applied, I can still install new adapters.

Does anyone use this successfully with that setup class?
Does anyone use it successfully with any other class?
LVL 59
McKnifeAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
McKnifeConnect With a Mentor Author Commented:
Self-solved:
I forgot about a domain GPO that was already applied long time ago. For the test, I used the local gpedit.msc, that was overridden by that domain GPO.
0
 
Paul MacDonaldDirector, Information SystemsCommented:
Are you sure you are subject to the GPO?   That is, does the account you're using have read permissions to the policy, and is it not a domain administrator?  If you log in as a different (normal-privilege) user, does the GPO still not work?
0
 
McKnifeAuthor Commented:
This is a computer GPO which does not apply to users but to the machine. Only this GPO is set so it applies to anybody including administrators.
My question is: who uses it successfully?
0
 
McKnifeAuthor Commented:
self-solved
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.