Controlling which kinds of devices can be installed

by Mitch Tulloch [Published on 2 Aug. 2006 / Last Updated on 2 Aug. 2006]

In Vista, you can prevent any specify type of device from being intalled.

Windows Vista gives you more control than ever before concerning which kinds of devices you can allow to be installed on your systems and which types you will prohibit installation. You can fine-tune this by editing local Group Policy as follows:

1. Type gpedit.msc in the Start Search box and hit Enter.

2. Click Continue when the UAC prompt appears.

3. Navigate to the following policy location:

Computer Configuration\Administrative Templates\System\Device Installation Restrictions

4. Enable the following policy setting:

Prevent installation of drivers matching these device setup classes

5. Click Show

6. Click Add

7. Type the GUID for the device class you want to prevent being able to install.

For example, if you want to prevent Bluetooth Devices from being installed, you would specify {e0cbf06c-cd8b-4647-bb8a-263b43f0f974} for the GUID.

For a list of GUIDs for different device types, see here.

Cheers,
Mitch Tulloch, MVP
http://www.mtit.com

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see www.mtit.com .

Latest Contributions

Featured Links