active-directory – 允许Active Directory中的特定USB存储设备

我只需要允许特定的授权USB存储设备连接到客户端机器,其他USB存储设备应该被阻止.如何在 Windows Server 2012 Active Directory中为此配置设置组策略?
组策略魔术.

复制并粘贴自:

https://msdn.microsoft.com/en-us/library/bb530324.aspx#grouppolicydeviceinstall_topic6

Allow users to install only authorized devices

This scenario builds upon the first scenario, Prevent installation of
all devices
, where you prevented the installation of any device. In
this scenario, you add a list of allowed devices to the policy and
include the hardware ID for your USB memory drive.

因此,首先要阻止使用一个GPO设置安装所有USB设备,然后使用另一个GPO设置仅允许某些设置.后一种设置将优先,有效地创建“例外”.

相关文章
相关标签/搜索