Solved

Device installation restriction GPO does not work

Posted on 2016-09-09
4
18 Views
Last Modified: 2016-09-17
Hi experts.

I just tried to setup a GPO: "Prevent Installation of a Device by Device Setup Class" as seen in https://technet.microsoft.com/en-us/library/cc732192(v=ws.10).aspx or https://davidzou.com/articles/windows/defend-against-badusb
In particular, I am trying to block the installation of network adapters, GUID: {4d36e972-e325-11ce-bfc1-08002be10318}
It does not seem to work, not on win7, not on win8.1, nor on win10 - although the policy is applied, I can still install new adapters.

Does anyone use this successfully with that setup class?
Does anyone use it successfully with any other class?
0
Comment
Question by:McKnife
  • 3
4 Comments
 
LVL 34

Expert Comment

by:Paul MacDonald
ID: 41791340
Are you sure you are subject to the GPO?   That is, does the account you're using have read permissions to the policy, and is it not a domain administrator?  If you log in as a different (normal-privilege) user, does the GPO still not work?
0
 
LVL 54

Author Comment

by:McKnife
ID: 41791344
This is a computer GPO which does not apply to users but to the machine. Only this GPO is set so it applies to anybody including administrators.
My question is: who uses it successfully?
0
 
LVL 54

Accepted Solution

by:
McKnife earned 0 total points
ID: 41794043
Self-solved:
I forgot about a domain GPO that was already applied long time ago. For the test, I used the local gpedit.msc, that was overridden by that domain GPO.
0
 
LVL 54

Author Closing Comment

by:McKnife
ID: 41802911
self-solved
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
centos linux 65 126
xcopy commands not running in batch file if user is logged out 5 25
error load library when execute a Drawing program 2 25
Info tab in iTune 9 20
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
In the market for a new backup solution for Windows Server 2016? Follow these guidelines to get the most bang for your buck.
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question