Safelisting Defender Drives through Group Policies

You can configure the Group Policy settings on any Windows 7 or 10 system (that is not being managed by Active Directory) to allow only Kanguru Defender drives to work on that computer while preventing other USB drives from working.

In order to restrict device access to Kanguru Defender drives, you must Enable two Group Policy settings as described below:

1. Open Device Manager and locate Kanguru Defender USB Device under Disk Drives.
2. Right click on Kanguru Defender USB Device and select Properties.
3. The Kanguru Defender USB Device Properties window opens. Click on the Details tab and then select Hardware IDs from the Property pull down menu. A list of hardware IDs for the Defender drive appears (see screen shot below). 
4. Open the Group Policy Editor.
5. In the left pane of the Group Policy Editor window, navigate to Local Computer Policy > Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions
6. Configure the state of the following two settings to “Enabled”:
   • Allow installation of devices that match any of these device IDs
   • Prevent installation of devices not described by other policy settings

7. When configuring the “Allow installation of devices that match any of these device ids” setting, use the Hardware IDs obtained in Step 3. In this test, the longest Hardware ID at the top of the list was sufficient to allow the Defender drive. It may be necessary to copy and paste all Hardware ID values discovered in step 3.

8. A system restart may be required for the new Group Policy settings to take effect.

 Note: The configuration may change depending on the OS and other policies in effect on the system.