[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

112965

 
 

909

 
 

87888

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-38445-3

Platform: win2012r2Date: (C)2015-10-08   (M)2018-03-26



Prevent installation of removable devices This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the driver for the device to which it is connected indicates that the device is removable. For example, a Universal Serial Bus (USB) device is reported to be removable by the drivers for the USB hub to which the device is connected. This policy setting takes precedence over any other policy setting that allows Windows to install a device. If you enable this policy setting, Windows is prevented from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server. If you disable or do not configure this policy setting, Windows can install and update device drivers for removable devices as allowed or prevented by other policy settings.


Parameter:


Technical Mechanism: (1) GPO: Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions!Prevent installation of removable devices (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyRemovableDevices

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28650


OVAL    1
oval:org.secpod.oval:def:28650
XCCDF    2
xccdf_org.secpod_benchmark_general_Windows_2012_R2
xccdf_org.secpod_benchmark_SecPod_Windows_Server_2012_R2

© SecPod Technologies