Locking down Bluetooth

[Geoff]

I have some new laptops that come with onboard bluetooth. We would like to keep it enabled but try and lock it down. Has anyone looked at this and had any success with controlling Bluetooth usage on Windows. Ideally through GPO?

[FN-GM]

I don't think its possible without a third party add-on. GFI Endpoint Security can manage it I think.

[gtg93]

We usually just disable the hardware or don't install the drivers if it's not needed at all...

 

edit - sorry. Misread the bit about keeping it enabled...

[timbo343]

Can you not use GP to stop the bluetooth exe running from system32? I cant remember what it is off the top of my head. If you stop the exe sure it stops the process.

 

The other thing to do, at login, create a script to disable the device by using the device id?

 

I have something similar that disables the wifi on a laptop so all traffic is forced to use the ethernet port.

[Callum]

As gtg93 said, we simply disable the driver using a script.

[FN-GM]

@Geoff isn't wanting to completely disable Bluetooth but just lock it down.

[timbo343]

If, and its a big if, you can find the keys in the reg you might be able to create your own

[MYK-IT]

If you have Sophos you can manage/disable Bluetooth through device management; although it's at computer, not user level so would disable for all users unless you change policy, or access and authenticate with Sophos locally and disable it. Which ultimately, is and would be no different from accessing device manager and enabling/disabling Bluetooth device.