i’m developing an application for windows 10 and 11 in c# to block USB devices by there IDs (VID&PID) and i’m using GPO ” Allow installation of devices that match any of these device ids” with “Prevent installation of devices not described by other policy settings”. when a device is plugged in, the application checks if the device is allowed (from external DB) and added his id in the registries “SoftwarePoliciesMicrosoftWindowsDeviceInstallRestrictionsAllowDeviceIDs”