Preventing installation of devices not described by other policy settings