Lockdown USB Driver Installation

zannap · 12 Feb 2012

Hi...currently Im running windows 7 home premium edition....Under normal curcumstances when a standard user is logged on they can install a usb device and windows automatically installs the driver for that device...What I want to do is prevent the driver from automatically loading and require an admin password install. This way if a standard users logs on and installs a USB device they will be required to have an admin password in order for windows to continue with the driver installation......

Does anyone know how to do this...been searching around for awhile now..Thanks so much...

DustSailor · 13 Feb 2012

Hello zannap, and welcome to Sevenforums!

You might consider using this method and see if it works, but it will require the UAC to be set at the highest settings:

Turn off automatic driver installation: Drivers - Turn Off Automatic Driver Installation

User Account Control - UAC - Change Notification Settings: User Account Control - UAC - Change Notification Settings

How to Change Behavior of User Account Control (UAC) Prompt for Standard Users: User Account Control (UAC) - Change Prompt Behavior for Standard Users

Additionally, this may not apply to you, but it could come in handy - How to Enable or Disable Users from Connecting a USB Storage Device in Windows: USB Storage Device - Enable or Disable Connecting

DustSailor · 13 Feb 2012

Zan,

You may also consider blocking other users from installing updates on their own (and thus enabling device driver installation): Windows Update - Enable or Disable "Who can install updates" Setting

That way, only the administrator can install updates.

Posts #2 and #3 Credits:
"Drivers - Turn Off Automatic Driver Installation" tutorial created by Capt.Jack Sparrow
All other tutorials in both posts created by Brink

zannap · 14 Feb 2012

Thanks everyone...Okay I got the part that if Windows update downloads the driver I can stop that but when you use a USB device, your computer installs a driver from the hard disk automatically not from the internet so how do I stop that...lets say I wanted to stop anyone from loading any driver when using a standard account but could load the driver is they knew the admin password...

I guess I just want the UAC to prompt when someone tries to install any driver on the system...is there a way to lock down automated driver installation...thanks again...

DustSailor · 14 Feb 2012

I know that programs such as panda USB vaccine (single user only program) can keep usb devices from auto-starting, thus preventing potential USB viruses from auto-starting.

What you are looking for is likely a software program outside of the windows environment, meaning purchased separately. However, it is still possible that windows is able to do what you describe. I would think you would need to own Windows professional or higher at least. Someone else may have a suggestion more for you, as I wouldn't know how to do this.