Prevent installation of removable devices

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista

This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example, a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. By default, this policy setting takes precedence over any other policy setting that allows Windows to install a device. NOTE: To enable the "Allow installation of devices using drivers that match these device setup classes", "Allow installation of devices that match any of these device IDs", and "Allow installation of devices that match any of these device instance IDs" policy settings to supersede this policy setting for applicable devices, enable the "Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria" policy setting. If you enable this policy setting, Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, Windows can install and update driver packages for removable devices as allowed or prevented by other policy settings.

This policy has no additional user input fields.

• Computer
  Allow administrators to override Device Installation Restriction policies

  At least Windows Vista
• Computer
  Allow installation of devices that match any of these device IDs

  At least Windows Vista
• Computer
  Allow installation of devices that match any of these device instance IDs

  At least Windows Server 2016, Windows 10 Version 1909
• Computer
  Allow installation of devices using drivers that match these device setup classes

  At least Windows Vista
• Computer
  Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria

  At least Windows Server 2016, Windows 10 Version 2106
• Computer
  Display a custom message title when device installation is prevented by a policy setting

  At least Windows Vista
• Computer
  Display a custom message when installation is prevented by a policy setting

  At least Windows Vista
• Computer
  Prevent installation of devices not described by other policy settings

  At least Windows Vista
• Computer
  Prevent installation of devices that match any of these device IDs

  At least Windows Vista
• Computer
  Prevent installation of devices that match any of these device instance IDs

  At least Windows Server 2016, Windows 10 Version 1909
• Computer
  Prevent installation of devices using drivers that match these device setup classes

  At least Windows Vista
• Computer
  Time (in seconds) to force reboot when required for policy changes to take effect

  At least Windows Server 2008 R2 or Windows 7