With Vista clients and Server 2008 systems, we have a number of new Group Policy settings that allow us to exert some level of control over which devices users can install and use.

It explains about the basics of Plug and Play: how its security model works, and the methods it uses to identify devices. It discusses the device installation policies first, followed by the device usage policies and then with some suggestions on how to target settings by using Group Policy Object links.