10.1. Restricting Access to Hardware via Group Policy

You know it's true: Those USB thumb-disk keys and removable media doo-dads make your personal life easier, but your professional life harder. You want a way to control which hardware devices can be installed by users and which can't.

Thank you, Group Policy, for coming to the rescue.

Imagine this scenario: You allow users to have USB mice, but disallow USB Disk on Keys. You could allow CD-ROM readers, but not DVD writers. You could allow Bluetooth, but disallow PCMCIA.

You're in control, letting Group Policy do the work for you.

There are two ways to make this magic happen. One way disables the device, which is nice. But the other way actually restricts the driver itself from even loading. ...

Get Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.