Is there a group policy (or any other setting) on Windows 10 Pro to disable any processing (i.e. reading/writing and most importantly automatic driver installation) when USB device is plugged into computer while it's locked?
Hi, outline suggestion:
Trigger a scheduled task thus:
- using group policy thus:
- which could be applied by using the corresponding registry settings.
Similarly on unlock you could reverse this.
One question would be when the policy became effective - e.g. only after restarting explorer/log off-on or immediately.
Hmm. Interesting suggestion. How do you program that group policy into a command line call though?
You discover the registry change made by asserting the policy.
A free program called Regshot can help. Snapshot before, change policy, snapshot after, compare.
Create a reg file, and schedule a script to merge it.
One possible difficulty might arise in identifying the precise change from the comparison - sometimes it's very easy, sometimes it's 1 bit amongst many.
And presumably you have Pro...
Quote
