Allow installation of devices using drivers that match these device setup classes

This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Windows is allowed to install. Use this policy setting only when the "Prevent installation of devices not described by other policy settings" policy setting is enabled. Other policy settings that prevent device installation take precedence over this one.

If you enable this policy setting, Windows is allowed to install or update device drivers whose device setup class GUIDs appear in the list you create, unless another policy setting specifically prevents installation (for example, the "Prevent installation of devices that match these device IDs" policy setting, the "Prevent installation of devices for these device classes" policy setting, or the "Prevent installation of removable devices" policy setting). If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.

If you disable or do not configure this policy setting, and no other policy setting describes the device, the "Prevent installation of devices not described by other policy settings" policy setting determines whether the device can be installed.

Supported on: At least Windows Vista
Registry PathSoftware\Policies\Microsoft\Windows\DeviceInstall\Restrictions
Value NameAllowDeviceClasses
Enabled Value1
Disabled Value0

Allow installation of devices using drivers for these device classes:

Registry PathSoftware\Policies\Microsoft\Windows\DeviceInstall\Restrictions\AllowDeviceClasses
Value Name{number}
Value TypeREG_SZ
Default Value

To create a list of device classes, click Show. In the Show Contents dialog box, in the Value column,

type a GUID that represents a device setup class

(for example, {25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}).


Administrative Templates (Computers)

Administrative Templates (Users)