Share via

USB port unlocking only for authorized devices

Christophe Peters 0 Reputation points
2025-03-12T10:28:05.14+00:00

Hello everyone,

Is it possible to unlock a USB port if a known device is connected?

Let me explain: as part of cybersecurity, our company has blocked USB ports for non-admin users (via GPO).

This prohibits devices other than keyboards and mice, such as HDDs, USB flash drives, phones, etc. This is to prevent possible malware infection.

We have a fleet of vehicles equipped with GOPRO-style cameras that film the road and the drivers' routes. They must save the recordings daily.

Is it possible, via GPO or software (I'm a developer, so if a ready-made solution doesn't exist, we could do it ourselves), to unlock the USB port only if the device's serial number or IMEI is pre-approved in the system?

Thank you for your reply.

PS: Our machines are running Windows 10, but if we need to configure one to Windows 11, no problem.

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
3,044 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Daisy Zhou 32,436 Reputation points Microsoft External Staff
    2025-03-14T03:20:08.6133333+00:00

    Hello Christophe Peters,

    Thank you for posting in Q&A forum.

    Yes, it is possible. To achieve USB port control based on device serial numbers or IMEIs, you can leverage Windows Group Policy and Device Installation Restrictions. Here are the steps to set this up: 1. Open Group Policy Editor:

    • Type gpedit.msc in the Run dialog (Win + R) to open the Group Policy Editor.

    1. Navigate to Device Installation Restrictions:

    • Go to Computer Configuration -> Administrative Templates -> System -> Device Installation -> Device Installation Restrictions.

    1. Enable Device Installation Restrictions:

    • Enable the policy "Prevent installation of devices not described by other policy settings".

    1. Specify Allowed Devices:

    • Enable the policy "Allow installation of devices that match any of these device IDs".

    • Add the device IDs (serial numbers or IMEIs) of the approved devices to the list.

    1. Apply the Policy:

    • Apply the policy settings and restart the computer to enforce the restrictions.

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.