A collection of methods that prohibit others from using U disk on your computer

Companies, schools, internet cafes and other places often need to disable U disk and mobile hard drives and other equipment, the reason is also diverse, such as preventing the staff to take away confidential information, to prevent students to take games to school room to play and so on.

Many friends may use USB management experts what kind of special restrictions on the use of U disk software, but they are a lot of fees.

Here I would like to provide a no use of professional software can disable U disk's small tips for everyone:

Steps/Methods

BIOS Setup Method

Enter the BIOS settings, select the "integratedperipherals" option, expand the "Usb1.1controller" and "usb2.0contr01ler" option to set the properties to "Disableed", you can disable the USB interface. Finally, do not forget to set a password on the BIOS so that others cannot solve the "lock" device by modifying the registry.

Note: This method is completely prohibited USB interface, which means that all kinds of USB interface devices can not be used, of course, also includes a U disk and mobile disk. As this law is too overbearing, please use caution.

Disable the boot of the flash disk or removable hard drive (for windowsxp/2000/2003)

Open Registry Editor, expand the following branch [Hkey_local_machine/system/currentcntrolset/services/usbstor], and locate the DWORD named "Start" in the right-hand pane, double-click, In the pop-up Edit dialog box, change its numeric data to 16-bit binary value "4". Click OK and close the Registry Editor to restart the computer for the settings to take effect. After reboot, when someone connects a USB storage device to the computer, the USB device cannot be used, although the LEDs on the USB device are blinking normally, but the letter is not found in the resource manager.

Hide and disable viewing (for Windows systems)

Open Registry Editor, expand the following branch in sequence [Hkey_current_user/software/microsoft/windows/currentversion/policies/explorer], and create a new binary value NoDrives, the default value is 00000000, which means that no drives are hidden. The key value consists of four bytes, each bit of each byte corresponds to a disk from a: to Z: When the corresponding bit is 1 o'clock, the corresponding drive in My computer is hidden. The first byte represents 8 disks from A to H, that is, 01 is a,02 b,04 for C ... By analogy, the second byte represents I to P, the third byte represents Q to X, and the fourth byte represents Y and Z. For example, to close the C disk, the key value to 04000000, to turn off D, to 08000000, to close the C and D disk, then to 0c000000 (c is hexadecimal, turn into decimal is 12).

After understanding the principle, take my computer as an example to illustrate how to: My Computer has a floppy drive, one hard disk (5 partitions), one optical drive, and the letter distribution is as follows: A: (3.5 floppy disk), C:, D:, E:, F:, G:, H: (CD), so my "NoDrives" value is " 02ffffff ", hide B, I to Z disk.

Restart the computer, and then insert a U disk, I can not see it in my computer, but in the address bar input I: (My computer after a letter is h) or access to the mobile disk. Here everyone can see "NoDrives" is just a camouflage, so we have to do one more step, is to create a new binary "noviewondrive", the value changed to "02ffffff", that is, its value and "NoDrives" the same. As a result, can not see the U-disk and can not access the U disk.

Disable USB driver installation

In WINDOWS Explorer, go to the system disk: Windows/inf directory, locate the file named "USBSTOR.PNF", right-click the file, select Properties from the pop-up menu, and switch to the Security tab, in the group or user name box, select the user group you want to suppress, and then in the Permissions box of the user group, check the Deny checkbox after Full Control, and then click the OK button.

Using the above method, the "Usbstor.inf" file is found and is set to deny user access to the group in the Security tab, and the procedure is the same. When the above settings are complete, users in this group will not be able to install the USB device driver, which will be disabled.

Note: To use an access control list (ACL), use the NTFS file system.