Whitelisting a USB device for Windows 10

[danielson81]

Hi,

 

We are currently setting up our Windows 10 image.

 

One thing I can't work out is how to white list one type of USB stick, and block the others.

 

On Windows 7, the Computer Configuration/Administrative Templates/System/Device Installation/Device Installation Restrictions policy works fine.

 

Our Windows 10 machine seems to ignore this and lets any USB stick be plugged in.

 

When I set a policy to block all removable devices it does indeed block all USB drives (System/Removable Storage/Removable Disks: Deny read access Enabled)

), but can't work out how to white-list one.

 

Should in theory it work with the policy for Windows 7, or does it need something else?

 

I have tried editing the GPO locally and took the PC off the domain to rule out server/network issues etc.

 

We have Win Server 2008 R2.