Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows Vista
    - Admin Tips
      - Administration
        More on preventing device installs

Section(s): Administration
Published on Aug 15, 2006.
Last Modified on Aug 15, 2006.
Last Modified by Mitch Tulloch.
Rated 3 out of 5 based on 3 votes.

Another way you can configure Vista to prevent certain kinds of devices from being installed.

Another way Vista lets you prevent new devices from being installed is by specifying the PnP hardware ID of the device type you want to prohibit. To do this, edit local Group Policy as follows:

1. Type gpedit.msc in the Start Search box and hit Enter.

2. Click Continue when the UAC prompt appears.

3. Navigate to the following policy location:

Computer Configuration\Administrative Templates\System\Device Installation Restrictions

4. Enable the following policy setting:

Prevent installation of devices that match these device IDs

5. Click Show

6. Click Add

7. Specify the device ID of the type of device you want to prevent from being installed. For example, to prevent USB combined devices like a keyboard with integrated pointing device from being installed, specify the following device ID:

USB\COMPOSITE

Cheers,
Mitch Tulloch, MVP
http://www.mtit.com

About Mitch Tulloch

Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is the book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. Mitch was also the author of Introducing Windows Server 2008 and technical project lead for the Microsoft Office Communications Server 2007 Resource Kit, both books also from Microsoft Press. For more information on these and other books by Mitch, see www.mtit.com .