引用Windows 2003 域控制器 组策略禁止USB的方法.doc

引用 Windows 2003 域控制器 组策略禁止USB的方法禁用usb的注册表方法 定位到 HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesUSBSTOR 右边有一个叫start的键值 双击他将值改成4 usb就禁用了 下次要恢复只需将4改成3就好了，把下段斜杠内的内容拷到文本文档中，保存成.ADM文件，然后打开你要做限制的OU的组策略，展开“用户配置,管理模板”,右击管理模板,添加/删除模板,然后把刚才保存的ADM文件导入!现在在这个OU下的所有用户将无法使用USB存储设备! / CLASS USER CATEGORY !ADMDesc POLICY !MMC_DeviceManagerX KEYNAME SoftwarePoliciesMicrosoftMMC90087284-d6d6-11d0-8353-00a0c90640bf #if version = 4 SUPPORTED !SUPPORTED_Win2k #endif EXPLAIN !MMC_Restrict_Explain val NAME Restrict_Run val ON NUMERIC 0 val OFF NUMERIC 1 END POLICY POLICY !MMC_DeviceManager KEYNAME SoftwarePoliciesMicrosoftMMC74246bfc-4c96-11d0-abef-0020af6b0b7a #if version = 4 SUPPORTED !SUPPORTED_Win2k #endif EXPLAIN !DEVMGR_Restrict_Explain val NAME Restrict_Run val ON NUMERIC 0 val OFF NUMERIC 1 END POLICY End CATEGORY CLASS MACHINE CATEGORY !ADMDesc POLICY !USB_UHCD_PARAMS KEYNAME SYSTEMCurrentControlSetServicesuhcd EXPLAIN !STARTUPTYPE_HELP PART !STARTUPTYPE NUMERIC REQUIRED val NAME START MIN 3 MAX 4 DEFAULT 3 END PART END POLICY POLICY !USB_UHCI_PARAMS KEYNAME SYSTEMCurrentControlSetServicesusbuhci EXPLAIN !STARTUPTYPE_HELP PART !STARTUPTYPE NUMERIC REQUIRED val NAME START MIN 3 MAX 4 DEFAULT 3 END PART END POLICY POLICY !USB_EHCI_PARAMS KEYNAME SYSTEMCurrentControlSetServicesusbehci EXPLAIN !STARTUPTYPE_HELP PART !STARTUPTYPE NUMERIC REQUIRED val NAME START MIN 3 MAX 4 DEFAULT 3 END PART END POLICY POLICY !USB_H KEYNAME SYSTEMCurrentControlSetServicesusbh EXPLAIN !STARTUPTYPE_HELP PART !STARTUPTYPE NUMERIC REQUIRED val NAME START MIN 3 MAX 4 DEFAULT 3 END PART END POLICY POLICY !CD_ROM KEYNAME SYSTEMCurrentControlSetServicescdrom EXPLAIN !STARTUPTYPE_HELP PART !STARTUPTYPE NUMERIC REQUIRED val NAME START MIN 3 MAX 4 DEFAULT 3 END PART END POLICY POLICY !Floppy_Disk KEYNAME SYSTEMCurrentControlSetServicesflpydisk EXPLAIN !STARTUPTYPE_HELP PART !STARTUPTYPE NUMERIC REQUIRED val NAME START MIN 3 MAX 4 DEFAULT 3 END PART END POLICY End CATEGORY strings ADMDesc=自定义策略 MMC_DeviceManagerX=设备管理器扩展插件 MMC_DeviceManager=设备管理器 SUPPORTED_Win2k=至少使用Microsoft Windows 2000 MMC_Restrict_Explain=Disable 禁用设备管理器扩展插件；Enable 启用设备管理器扩展插件 DEVMGR_Restrict_Explain=Disable 禁用设备管理器；Enable 启用设备管理器 USB_UHCD_PARAMS=USB通用主控制器驱动器 STARTUPTYPE_HELP=启动类型，3-手动，4-禁用 STARTUPTYPE=启动类型 USB_EHCI_PARAMS=Microsoft USB 2.0 Enhanced Host Controller Miniport Driver USB_UHCI_PARA