Disable device installation on XP
Briefly tested, the following is a method that will disable the ability for anyone to install devices to Windows XP.
On Windows 7, there is a method to manage device installation via group policy. Although, the following method should work as well.
Within DACL for the following objects…
Adjust the entry for the SYSTEM object to match:
Deny: Set Value Deny: Create Subkey Deny: Write DAC Deny: Write Owner
Change the owner to an off system entity and you should be set. This permission can be configured via Group Policy.