Share via

USB port unlocking only for authorized devices

Christophe Peters 0 Reputation points
2025-03-12T10:28:05.14+00:00

Hello everyone,

Is it possible to unlock a USB port if a known device is connected?

Let me explain: as part of cybersecurity, our company has blocked USB ports for non-admin users (via GPO).

This prohibits devices other than keyboards and mice, such as HDDs, USB flash drives, phones, etc. This is to prevent possible malware infection.

We have a fleet of vehicles equipped with GOPRO-style cameras that film the road and the drivers' routes. They must save the recordings daily.

Is it possible, via GPO or software (I'm a developer, so if a ready-made solution doesn't exist, we could do it ourselves), to unlock the USB port only if the device's serial number or IMEI is pre-approved in the system?

Thank you for your reply.

PS: Our machines are running Windows 10, but if we need to configure one to Windows 11, no problem.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
3,017 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daisy Zhou 31,056 Reputation points Microsoft External Staff
    2025-03-14T03:20:08.6133333+00:00

    Hello Christophe Peters,

    Thank you for posting in Q&A forum.

    Yes, it is possible. To achieve USB port control based on device serial numbers or IMEIs, you can leverage Windows Group Policy and Device Installation Restrictions. Here are the steps to set this up: 1. Open Group Policy Editor:

    • Type gpedit.msc in the Run dialog (Win + R) to open the Group Policy Editor.

    1. Navigate to Device Installation Restrictions:

    • Go to Computer Configuration -> Administrative Templates -> System -> Device Installation -> Device Installation Restrictions.

    1. Enable Device Installation Restrictions:

    • Enable the policy "Prevent installation of devices not described by other policy settings".

    1. Specify Allowed Devices:

    • Enable the policy "Allow installation of devices that match any of these device IDs".

    • Add the device IDs (serial numbers or IMEIs) of the approved devices to the list.

    1. Apply the Policy:

    • Apply the policy settings and restart the computer to enforce the restrictions.

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.