I've been researching a bit into how to best enable a removable storage restriction policy that we would begin applying to all Win7 PCs in the domain, but have been unable to find a method that suits our needs. We would like to allow only certain USB sticks (not *models* of USB sticks, but specific individual sticks) to have their device drivers loaded. It seems that in group policy you can enable only certain hardware IDs to install, but if a user happens to have a non-approved stick of matching hardware ID then they can freely use it. Also, it seems that a side effect of enabling "Prevent installation of devices not described by other policy settings" would be that it would apply to other devices other than removable storage and that's not what we want to accomplish. So I guess what I'm asking is if anyone has a method to lock down all removable storage devices through Group Policy except certain individual devices? Thanks

Hi, Based on my experience, this cannot be achieved. If you find have any inconveniences or suggestions, please submit your feedback to our Product Feedback Team : http://mymfe.microsoft.com/Windows%20%207/Feedback.aspx?formID=195Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.