I'm looking for something--hopefully a group policy--that allows me to use a usb flash/thumbdrive as my login, or as the second factor along with my password.

In a nutshell, I'm doing this because I want to limit my own access to the administrator accounts on my laptop during the day, so that I'm jailed to an account that only has access to MS Word and some work-related websites.

If it's avoidable, I would prefer not to use third-party software.

  • The only native support that I am aware of for windows, as far as access is concerned is this however there are plenty of third party apps that do what you want, I am not sure about group policy though.
    – John
    Nov 3, 2011 at 3:20

2 Answers 2


A GoldKey will secure a Windows 7 account right out of the box.

You can even install Active Directory certificates in it so you can use special Group Policies per key.


You'll need some third party software. Unfortunately, USB drives aren't encrypted nor secure and thus give little reason for Microsoft to implement them as a multi factor authentication.

In most secure environments I've seen, USB ports are just straight up disabled in BIOS or disconnected physically.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .