This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
None
Delegation
These groups and users have the specified permission for this GPO
Name
Allowed Permissions
Inherited
EMEA\Domain Admins
Edit settings, delete, modify security
No
EMEA\GR-G-ORG-OU Admins
Edit settings, delete, modify security
No
EMEA\tentolouris.5-adm
Edit settings, delete, modify security
No
NT AUTHORITY\Authenticated Users
Read
No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
Read
No
NT AUTHORITY\SYSTEM
Edit settings, delete, modify security
No
ROOT\Enterprise Admins
Edit settings, delete, modify security
No
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Citrix Components/Citrix Workspace/Remoting client devices/Generic USB Remoting
Policy
Setting
Comment
USB Device Rules
Enabled
Semicolon-separated list of USB device rules.
USB Device Rules
# Syntax is an ordered list of case insensitive rules where # is line comment ; # and each rule is (ALLOW | DENY) : ( match )* ; # and each match is (class|subclass|prot|vid|pid|rel) = hex-number ; # Maximum hex value for class/subclass/prot is FF, and for vid/pid/rel is FFFF ; DENY: vid=17e9 # All DisplayLink USB displays ; DENY: class=02 # Communications and CDC-Control ; DENY: class=09 # Hub devices ; DENY:vid=045e pid=079A # Microsoft Surface Pro 1 Touch Cover ; DENY:vid=045e pid=079c # Microsoft Surface Pro 1 Type Cover ; DENY:vid=045e pid=07dc # Microsoft Surface Pro 3 Type Cover ; DENY:vid=045e pid=07dd # Microsoft Surface Pro JP 3 Type Cover ; DENY:vid=045e pid=07de # Microsoft Surface Pro 3_2 Type Cover ; DENY:vid=045e pid=07e2 # Microsoft Surface Pro 3 Type Cover ; DENY:vid=045e pid=07e4 # Microsoft Surface Pro 4 Type Cover with fingerprint reader ; DENY:vid=045e pid=07e8 # Microsoft Surface Pro 4_2 Type Cover ; DENY:vid=03eb pid=8209 # Surface Pro Atmel maXTouch Digitizer ; ALLOW:vid=056a pid=0315