How to Setup USB Device Restriction in Windows 10 - Restrict/Block Flash Drives

Malware or viruses are commonly stored on USB devices, which can then automatically infect a machine when the user inserts it into their machine. Join Wes Bryan in this video, to learn how to restrict USB thumb drives to only company authorized devices. He will also demonstrate how to restrict all USB thumb drives, which is handy when administering to kiosks.

Note: This demo uses Windows 10 Pro, the tasks will not work on Windows 10 Home.

Scenario 1: Restricting USB devices to only authorized devices 00:00-13:39
Scenario 2: Restricting all USB devices 13:39-19:37

Connect with Wes:

#usbdevicerestriction #restrictusbdevices #usbdevicerestrictionwindows10

[tg]

Great tutorial. Thank you. What happens when you use the last generic id property? I noticed you selected second to the last id property.

[vasilischatzitournos]

Perfect tutorial!! One question though? Is it going to block devices such as usb keyboards or mice? If it is yes how can you allow this? Because the point is to deny access only to usb storage devices that can be harmful or steal any data from the pc…

[Quenayus]

Good stuff! Thanks for sharing :)

just one question: is there a way to make it so the message u get about the device not being authorized to pop up full screen with full bells and whistles?

I'm currently working on a solution to prevent students at my school to be able to cheat during a test on school-managed laptops and I kind of want a big pop up that screams and shouts big time so that the teacher that is surveying the test is immediately warned to it...

[kduramos]

Hi i'm issue my webcam show on device manager, but not show in any software. and in pravicy show usb video device, and i click to enable but nothing happend. and this happend days ago . Have any configuration to force to enable it again??

[mohamadferdowssharifi]

I have to say well done Wes Like always, wes I have question from you If you answer my question it'll be great. I have to Computer or VMs that run windows 10, both computer or VMs are not part domain but I want to access Task schedular remotly from computer 2 how should I solve this problem actually I tested in my lab but a warning said like "you do not have access to this computer" in first computer if you have please please please make some video about this problem I'm sure it'll grab a lot of attention in YouTube tanks..

[juliocaproni]

Is it possible doing that using PowerShell?

[jayhchd]

Can you do the same thing but under user config? Is that possible?

[farziddindoniyorov]

best tutorial, but i got a problem, DeviceInstall\Restrictions is not present in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows, anybody knows why it is so and how to fix?

[joecox]

next time if I cannot get to sleep I will watch this thanks

[zetemanne]

You allowed all Patriot Memory kind usb sticks, not just this one you have in your hand using this GPO ;) This is not good for any company ;P

[abhisheksuraj]

I think Microsoft engineers are really stupid to do it this way, making it extremely complex and still not be able to solve the problem completely. Simple way will be to allow users to give a name to each 'allowable' hard disk, and then use those names to grant/deny access instead of those stupid hardware IDs which can never solve the problem truly because someone can get the exact same company's hard disk and easily 'intrude' into the system.