<div>
Are you sure you are subject to the GPO? &nbsp; That is, does the account you're using have read permissions to the policy, and is it not a domain administrator? &nbsp;If you log in as a different (normal-privilege) user, does the GPO still not work?
</div>


Are you sure you are subject to the GPO?   That is, does the account you're using have read permissions to the policy, and is it not a domain administrator?  If you log in as a different (normal-privilege) user, does the GPO still not work?

<div>
This is a computer GPO which does not apply to users but to the machine. Only this GPO is set so it applies to anybody including administrators.<br />
My question is: who uses it successfully?
</div>


This is a computer GPO which does not apply to users but to the machine. Only this GPO is set so it applies to anybody including administrators.
My question is: who uses it successfully?

<div>
<div class="content wysiwyg-content">
Hi experts.<br />
<br />
I just tried to setup a GPO: &quot;Prevent Installation of a Device by Device Setup Class&quot; as seen in <a href="https://technet.microsoft.com/en-us/library/cc732192(v=ws.10).aspx" rel="ugc">https://technet.microsoft.com/en-us/library/cc732192(v=ws.10).aspx</a>&nbsp;or <a href="https://davidzou.com/articles/windows/defend-against-badusb" rel="ugc">https://davidzou.com/articles/windows/defend-against-badusb</a><br />
In particular, I am trying to block the installation of network adapters, GUID: {4d36e972-e325-11ce-bfc1-0<wbr />8002be1031<wbr />8}<br />
It does not seem to work, not on win7, not on win8.1, nor on win10 - although the policy is applied, I can still install new adapters.<br />
<br />
Does anyone use this successfully with that setup class?<br />
Does anyone use it successfully with any other class?
</div>
</div>


Hi experts.

I just tried to setup a GPO: "Prevent Installation of a Device by Device Setup Class" as seen in https://technet.microsoft.com/en-us/library/cc732192(v=ws.10).aspx or https://davidzou.com/articles/windows/defend-against-badusb
In particular, I am trying to block the installation of network adapters, GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
It does not seem to work, not on win7, not on win8.1, nor on win10 - although the policy is applied, I can still install new adapters.

Does anyone use this successfully with that setup class?
Does anyone use it successfully with any other class?

Device installation restriction GPO does not work

Windows 10 is a personal computer operating system featuring the "universal application architecture" (UAP); apps can be designed to run across multiple devices with nearly identical code, including PCs, tablets, smartphones, embedded systems, Xbox One, Surface Hub and HoloLens. Windows 10 also includes a virtual desktop system, a window and desktop management feature called Task View, the Microsoft Edge web browser, support for fingerprint and face recognition login, voice-based search (Cortana), new security features for enterprise environments, and DirectX 12 and WDDM 2.0 to improve the operating system's graphics capabilities for games.

Windows 10

Windows 7 is an operating system from Microsoft. Features include multi-touch support, a redesigned Windows Shell with a new taskbar, referred to as the Superbar, a home networking system called HomeGroup, and performance improvements.

Windows 7

Windows 8 is a personal computer operating system developed by Microsoft as part of the Windows NT family of operating systems, with an emphasis on improving its user experience on tablets. In particular, these changes included a touch-optimized Windows shell based on Microsoft's "Metro" design language, the Start screen, a new platform for developing apps with an emphasis on touchscreen input, integration with online services, support for USB 3.0, Advanced Format hard drives, near field communications, and cloud computing. Additional security features were introduced, such as built-in antivirus software, integration with Microsoft SmartScreen phishing filtering service and support for UEFI Secure Boot on supported devices with UEFI firmware.