dentifying the USB Storage to be allowed

1. Plug in the USB storage device that you want to allow in your desktop or laptop
with Windows OS
2. Open “Run” and type “devmgmt.msc” to access the Device Manager

3. On the Device Manager go to “Disk Drives” and right click on the USB storage and
select “Properties”.
4. Navigate to “Details” and select “Device Instance Path” from the drop-down
menu.

5. Copy the “Value”

 Configuring the Group Policy

1. In Active Directory Server, navigate to “Group Policy Management”

2. In this scenario, we will edit the currently applied group policy in a certain OU.
Right click on the policy and select “Edit”.
3. Navigate to “Computer Configuration” > “Administrative Templates” > “System”
> “Device Installation” > “Device Installation Restrictions” and select “Allow
installation of devices that match any of these Device IDs”

4. Select “Enabled” and click on “Show”

5. Add the Value we have copied previously. Click on Ok and Apply.

After configuring the policy, it will be displayed in the Group Policy Manager
Settings
 Controlling USB Devices That Have Already Been
Installed
For this scenario, one option is to uninstall the USB drive, which will put the
computer in the state of not having the USB drive installed.

Steps to Safely Cleanup and Remove old USB Mass Storage

Drivers on your PC:
1. Shut down your computer. Unplug your USB storage devices: USB Disks, flash,
cams, CD/DVD, etc. as well as your USB hubs
==> Other USB devices like keyboards, mice and LAN adapters can stay plugged in
2. Boot computer back up
3. Download drivecleanup.zip, unzip and save to your desktop. Move the 32 or 64 bit
version (Depending on your Windows OS) of DriveCleanup.exe to C:\Windows\
System32

Download drivecleanup here:

https://drive.google.com/file/d/17qyB-nLktWDNe9t8Okvur5966eOrwEfF/view?
usp=sharing

4. Open an elevated command prompt window:

5. In the command prompt enter: drivecleanup.exe
==> Your output should be similar to my example below.
==> If, instead, you get an error message like Command not recognized it means
you didn't move Drivecleanup.exe to the right directory
6. Reboot. Now just re-plug your devices for fresh clean device reinstalls.