Unable to install since SP1 due to policy

Hello!
I updated to SP1 earlier this week and ever since, I have been unable to install any new devices "due to a policy".

So far I have tried to install a USB scanner and a USB memory stick, all goes well until windows searches for the drivers, then it pops up saying installation failed due to policy.

I am stumped as to what could be the problem, I am local and domain admin and have never had this type of message before.

Can anyone help me out?

Kind regards,
Will.

The group policy editor has settings that can be used to configure usb installs. See here for a walkthrough.

Control ALL USB Devices Using Group Policy

This is a more detailed page.

Locking down Windows Vista and Windows 7 against Malicious USB devices

Hello Bill2,
Thank you for the post. I have had a read through the links you have posted and they appear to detail how I would be able to prevent the installation of USB devices.

The actual problem I have is that I am trying to install but Windows will not let me. I have never set a policy on this machine or on the domain, it's only since installing SP1 that I am now unable to install any new drivers.
I hope that helps to clarify - I apologise if my initial post was a little vague.

Kind regards,
Will.

williamfox4 said:

Hello Bill2,
Thank you for the post. I have had a read through the links you have posted and they appear to detail how I would be able to prevent the installation of USB devices.

The actual problem I have is that I am trying to install but Windows will not let me. I have never set a policy on this machine or on the domain, it's only since installing SP1 that I am now unable to install any new drivers.
I hope that helps to clarify - I apologise if my initial post was a little vague.

Kind regards,
Will.

Did you actually check your policy settings as described in those links?

Hello,
Yes, I launched gpedit.msc and navigated to
Computer Configuration | Administrative Templates | System | Device Installation | Device Installation Restrictions

In this location there was a policy called “Allow administrators to override Device Installation Restriction policies” which was currently Not configured. I set the value to enabled which read “If you enable this policy setting, members of the Administrators group can use the Add Hardware wizard or the Update Driver wizard to install and update the drivers for any device.”
After updating the policy I launched "gpupdate /force" from the run command to force an update of the policy.

The difference now is that using the device manager I am able to install the driver, but within seconds I get the “Unable to install due to Policy” bubble and the device is not detected…..

Kind regards,
Will.

OK. Can you run sfc scan a few times?

SFC /SCANNOW Command - System File Checker