Good stuff! Thanks for sharing :) just one question: is there a way to make it so the message u get about the device not being authorized to pop up full screen with full bells and whistles? I'm currently working on a solution to prevent students at my school to be able to cheat during a test on school-managed laptops and I kind of want a big pop up that screams and shouts big time so that the teacher that is surveying the test is immediately warned to it...
Perfect tutorial!! One question though? Is it going to block devices such as usb keyboards or mice? If it is yes how can you allow this? Because the point is to deny access only to usb storage devices that can be harmful or steal any data from the pc…
The more generic the ID the broader range this policy setting will have. If you want all USB storage devices to be disable then the most generic identifier might work, however this might be to restrict and unnecessarily disable devices that do not need disabled. So it really is specific to what you are trying to accomplish!
I have to say well done Wes Like always, wes I have question from you If you answer my question it'll be great. I have to Computer or VMs that run windows 10 , both computer or VMs are not part domain but I want to access Task schedular remotly from computer 2 how should I solve this problem actually I tested in my lab but a warning said like "you do not have access to this computer" in first computer if you have please please please make some video about this problem I'm sure it'll grab a lot of attention in RUclips tanks..
You can use Remote Desktop Connection to connect to the machine, your account will have to be in the Remote Users group or the Local Administrators group. You will have to enable Remote Desktop in the advanced System Properties as it is disabled by default.
Hi i'm issue my webcam show on device manager, but not show in any software. and in pravicy show usb video device, and i click to enable but nothing happend. and this happend days ago . Have any configuration to force to enable it again??
best tutorial, but i got a problem, DeviceInstall\Restrictions is not present in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows, anybody knows why it is so and how to fix?
I think Microsoft engineers are really stupid to do it this way, making it extremely complex and still not be able to solve the problem completely. Simple way will be to allow users to give a name to each 'allowable' hard disk, and then use those names to grant/deny access instead of those stupid hardware IDs which can never solve the problem truly because someone can get the exact same company's hard disk and easily 'intrude' into the system.
Great tutorial
Appreciate it!
Good stuff! Thanks for sharing :)
just one question: is there a way to make it so the message u get about the device not being authorized to pop up full screen with full bells and whistles?
I'm currently working on a solution to prevent students at my school to be able to cheat during a test on school-managed laptops and I kind of want a big pop up that screams and shouts big time so that the teacher that is surveying the test is immediately warned to it...
Perfect tutorial!! One question though? Is it going to block devices such as usb keyboards or mice? If it is yes how can you allow this? Because the point is to deny access only to usb storage devices that can be harmful or steal any data from the pc…
Good question
Great tutorial. Thank you. What happens when you use the last generic id property? I noticed you selected second to the last id property.
The more generic the ID the broader range this policy setting will have. If you want all USB storage devices to be disable then the most generic identifier might work, however this might be to restrict and unnecessarily disable devices that do not need disabled. So it really is specific to what you are trying to accomplish!
I have to say well done Wes Like always, wes I have question from you If you answer my question it'll be great. I have to Computer or VMs that run windows 10 , both computer or VMs are not part domain but I want to access Task schedular remotly from computer 2 how should I solve this problem actually I tested in my lab but a warning said like "you do not have access to this computer" in first computer if you have please please please make some video about this problem I'm sure it'll grab a lot of attention in RUclips tanks..
If they aren't on a domain do you have the same user/pass setup on both workstations?
You can use Remote Desktop Connection to connect to the machine, your account will have to be in the Remote Users group or the Local Administrators group. You will have to enable Remote Desktop in the advanced System Properties as it is disabled by default.
@@ITProTv tanks wes for response.
Good Stuff thanks for sharing
Hi i'm issue my webcam show on device manager, but not show in any software. and in pravicy show usb video device, and i click to enable but nothing happend. and this happend days ago . Have any configuration to force to enable it again??
very fine
So thanks, you help me.
Is it possible doing that using PowerShell?
Can you do the same thing but under user config? Is that possible?
best tutorial, but i got a problem, DeviceInstall\Restrictions is not present in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows, anybody knows why it is so and how to fix?
You allowed all Patriot Memory kind usb sticks, not just this one you have in your hand using this GPO ;) This is not good for any company ;P
next time if I cannot get to sleep I will watch this thanks
love it
I think Microsoft engineers are really stupid to do it this way, making it extremely complex and still not be able to solve the problem completely. Simple way will be to allow users to give a name to each 'allowable' hard disk, and then use those names to grant/deny access instead of those stupid hardware IDs which can never solve the problem truly because someone can get the exact same company's hard disk and easily 'intrude' into the system.