Skip to content

Commit

Permalink
Update README-en.md
Browse files Browse the repository at this point in the history
  • Loading branch information
LizenzFass78851 authored Sep 8, 2024
1 parent d018a81 commit dbfb32b
Showing 1 changed file with 5 additions and 5 deletions.
10 changes: 5 additions & 5 deletions DIY USB Whitelisting/README-en.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,19 +15,19 @@ This allows you to apply this whitelisting to a local computer without AD infras
### Procedure:
1. Unzip `DeviceCleanup.zip` and run `DeviceCleanup.exe` from either the `x64` directory (for Windows in the x64 / 64 bit architecture) or `Win32` (for Windows in the x86 / 32 bit architecture)

1.1. In the `DeviceCleanup` program, mark all USB devices listed there with the "CTRL" key + "A" key and remove them with the "DEL" key.
1.1. In the `DeviceCleanup` program, mark all USB devices listed there with the "CTRL" key + "A" key and remove them with the "DEL" key.

2. Run `CreateWhitelist.ps1` and open the created `USBWhitelist.txt`. The contents of this file will be needed later

3. Open `gpedit.msc` under the search bar.

3.1. Navigate to "Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions"
3.1. Navigate to "Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions"

3.2. Activate the following GPO "Allow installation of devices with these device IDs"
3.2. Activate the following GPO "Allow installation of devices with these device IDs"

3.2.1. Click on "Show" and insert the IDs read from `USBWhitelist.txt` line by line and click on "OK" and then on "OK" again
3.2.1. Click on "Show" and insert the IDs read from `USBWhitelist.txt` line by line and click on "OK" and then on "OK" again

3.3. Activate the following GPO "Prevent installation of devices not described in other policies" and click on "OK"
3.3. Activate the following GPO "Prevent installation of devices not described in other policies" and click on "OK"


This should make this USB whitelisting work.
Expand Down

0 comments on commit dbfb32b

Please sign in to comment.