This document shows you the steps required to implement the most restrictive configuration, where all device installations are prevented and existing devices cannot be updated with new device drivers. Users will not be able to install a device and use it without intervention from an administrator. Administrators can still install or update any device as needed.
1. Log on to your computer with an administrator account.
2. To open Group Policy Object Editor, click the Start button, type mmc gpedit.msc in the Start Search box, and then press ENTER.
3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
4. In the Group Policy Object Editor navigation pane, double-click Computer Configuration to open it. Then open Administrative Templates, open System, open Device Installation, and then open Device Installation Restrictions.
5. In the details pane, right-click Prevent installation of devices not described by other policy settings, and click
Properties. The policy dialog box appears with the current settings.
6. On the Setting tab, click Enabled to turn the policy on.
7. Click OK to save your settings and return to Group Policy Object Editor.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment