Allow Administrators to Override Device Installation Restriction Policies

  • Article

Applies To: Windows Server 2008

You can use this procedure to ensure that the device installation restriction policies you apply to a computer do not affect members of the Administrators group.

By default, a device installation restriction policy affects all users of the computer, including members of the local Administrators group. By enabling this policy, you exempt administrators from the effects of the policy, and allow them to do the device installation tasks they need to do.

Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

To allow administrators to override device installation restriction policies

  1. Open Group Policy Management Editor.

  2. In the navigation pane, open the following folders: Computer Configuration, Administrative Templates, System, Device Installation, and Device Installation Restrictions.

  3. In the details pane, double-click Allow administrators to override Device Installation Restriction policies.

  4. Click Enabled.

  5. Click OK to save your settings.

Additional considerations

  • To open Group Policy Management Editor, click Start, then in the Start Search box, type mmc  gpedit.msc, and then press ENTER. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

  • If you edit policy settings locally on a computer, you will affect the settings on only that one computer. If you configure the settings in a Group Policy object (GPO) hosted in an Active Directory domain, then the settings apply to all computers that are subject to that GPO. For more information about Group Policy in an Active Directory domain, see Group Policy (https://go.microsoft.com/fwlink/?LinkId=55625).