To enable USB ports from programs using Windows 11 Group Policy, navigate to "Computer Configuration > Administrative Templates > System > Removable Storage Access" and then configure the desired policy settings to allow specific USB devices or classes of devices based on your requirements; you can use options like "Allow installation of devices that match any of these device IDs" to specify which USB devices are permitted to access by programs.
Key points to remember:
- Open the Group Policy Editor by pressing "Windows key + R", typing "gpedit.msc", and hitting Enter.
- Go to "Computer Configuration > Administrative Templates > System > Removable Storage Access" in the left pane.
- Depending on your needs, you can select options like "Removable Disks: Deny Execute Access" to completely block USB drives, or use more granular controls to allow specific devices by their hardware IDs.
- If you want to allow certain USB devices, select "Enabled" on a policy like "Allow installation of devices that match any of these device IDs" and then enter the specific hardware IDs of the allowed devices.
The OTHER Solution for people is Whitelist (firewall) and Antivirus settings to send if people have access issues (particularly with a new PC)