【 Weak current College 】 teach you prohibit others use USB interface

Companies, schools, Internet cafés, etc. often need to disable USB disk and removable hard drive, and other devices, the reasons are varied, such as preventing employees take the confidential information to prevent the students go to school with game room and play, and so on ... ....

Many of my friends might use USB management experts what kind of special restrictions on the use of USB disk software, but many of them is to charge wow ...

Today, it provides a less specialized software will be able to disable the USB disk's tips for everyone:

Method a, BIOS settings method (quick method)

Enter the BIOS Setup, select the option "IntegratedPeripherals" that will "USB1.1Controller" and "USB2.0Contr01ler" option set to "on", you can disable Disableed USB interface. Finally don't forget to set a password on BIOS so that others will not be able to modify the registry for the "lock" the above equipment.

Note: this method is a complete ban on a USB interface, which means that the various USB devices are not used, which of course includes the u disk and move up. Because this method too overbearing, used with caution.

Method two, suppress Flash disk or removable hard drive's boot (for WindowsXP/2000/2003)

Open the registry editor, expand the following Branch [HKEY_LOCAL_MACHINE\SYSTEM\CurrentCntrolSet\Services\USBSTOR], in the right pane, locate the name of "Start" DWORD value, double-click the Edit dialog box to modify its value data as 16-bit hexadecimal value "4". Point "OK" button and close the registry editor and restart the computer for the settings to take effect. After reboot, when someone is a USB storage device connected to your computer, while the led on the USB device in the normal blinking, but among the resource manager is unable to find the letter, and therefore there is no way to use a USB device.

Method 3, hidden letter and prohibited see (for Windows systems)

Open the registry editor, expand the following Branch [HKEY_CURRENT_USER\software\Microsoft\Windows\CurrentVersion\Ploicies\Explorer], create a new binary value "NoDrives" and their default values are not hidden, 00000000 any drive. Key value consists of four bytes, each byte of each bit (bit): from A corresponding to a spare Z:, if the corresponding bit is 1, the "my computer" in the drive to be hidden. The first byte represents a to h 8 disc, i.e. 01-A, b, 04/02 to C. .. And so on, the second byte on behalf of the I-to-P and the third byte represents Q to X, the 4th byte represents the Y and Z. For example, to close the C disk, change the key values; to close D 04000000, is re-routed 08000000, to close the disc tray and D C, then changed to 0C000000 (C conversion to hexadecimal, decimal is 12).

Understanding the principles below to my computer, for example shows how to: my computer with a floppy drive, a hard drive (5 partition), an optical drive, letter distribution is this: A: (3.5 floppy disk), C: D: E,,:, F:, G: H:, (CD-ROM), so my "NoDrives" value is "02ffffff", hides the B, I to z disk.

Restart your computer, then insert the USB drive in my computer is invisible, but in the address bar, enter the I: (my computer after power is a letter H) or you can access mobile disk. Here we see that the "NoDrives" just camouflage, so we need to do one more step, is to create a binary "NoViewOnDrive" value to "02ffffff", which means that its value is the same as the "NoDrives". In this way, we don't see U letter also access not to the USB disk.

Method 4, install the USB driver

In Windows Explorer, go to the "system tray: \WINDOWS\inf" directory, locate the name of "Usbstor.pnf" file, right-click the file, in the pop-up menu, select "Properties", and then switch to the "security" tab, in the "group or user names" box select the banned user group, user group permissions box, select the "full control" later "refused" check box, and finally click "OK" button.

Then use theabove method, find the "usbstor.inf" file and in the Security tab page is set to deny the user access to the group, its operating procedure ibid. After completing the above setup, this group of users will be unable to install USB device drivers, and thus achieve the purpose of the disabled.

Note: If you want to use the access control list (ACL) that you want to use the NTFS file system.