Solved

Device installation restriction GPO does not work

Posted on 2016-09-09
4
16 Views
Last Modified: 2016-09-17
Hi experts.

I just tried to setup a GPO: "Prevent Installation of a Device by Device Setup Class" as seen in https://technet.microsoft.com/en-us/library/cc732192(v=ws.10).aspx or https://davidzou.com/articles/windows/defend-against-badusb
In particular, I am trying to block the installation of network adapters, GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
It does not seem to work, not on win7, not on win8.1, nor on win10 - although the policy is applied, I can still install new adapters.

Does anyone use this successfully with that setup class?
Does anyone use it successfully with any other class?
0
Comment
Question by:McKnife
  • 3
4 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 41791340
Are you sure you are subject to the GPO?   That is, does the account you're using have read permissions to the policy, and is it not a domain administrator?  If you log in as a different (normal-privilege) user, does the GPO still not work?
0
 
LVL 53

Author Comment

by:McKnife
ID: 41791344
This is a computer GPO which does not apply to users but to the machine. Only this GPO is set so it applies to anybody including administrators.
My question is: who uses it successfully?
0
 
LVL 53

Accepted Solution

by:
McKnife earned 0 total points
ID: 41794043
Self-solved:
I forgot about a domain GPO that was already applied long time ago. For the test, I used the local gpedit.msc, that was overridden by that domain GPO.
0
 
LVL 53

Author Closing Comment

by:McKnife
ID: 41802911
self-solved
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
On some Windows 7 (SP1) computers, Windows Update becomes super slow even the computer is reasonably fast.  There's one solution that seemed to have worked well for me (after trying a few other suggested solutions).
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now