How to disable USB storage devices and block USB flash drives using Win7 group policies

How to disable USB storage devices and block USB flash drives using Win7 group policies
In the company's Lan, we often need to disable USB flash drives and shield the use of USB storage devices. How can we achieve this?
Method 1: Disable USB flash drives and block USB storage devices using Win7 group policies
Click Start, Run, and enter the Group Policy command gpedit. msc, open the Group Policy Editor, find the Local Group Policy Editor, select computer configuration-management template-system-device installation restrictions, and set on the right: disable the installation of removable devices. You can double-click to disable the installation of removable devices, and then select enable in configuration to disable the use of USB flash drives and mobile hard disks under win7.
Another method is to disable USB flash drives or USB storage devices through the registry. The details are as follows:
1. Run REGEDIT
2. Expand HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ USBSTOR
3. Right-click Start and change its value to 4. you can disable the USB flash drive. to disable the USB flash drive, change 4 to 3.

However, whether USB flash drives are disabled by group policies or USB flash drives are disabled by registry, they are implemented by operating system configurations, therefore, it is easy for some technical staff to re-enable the USB flash drive and re-use the USB storage device by means of reverse modification, which makes the above method have some shortcomings and defects. In this case, you can consider deploying software to disable the USB flash disk.
Method 2: block USB storage devices by using software that restricts the use of USB flash drives and prohibits copying USB flash drives
At present, there are some specialized computer USB shielding software and computer USB flash drive disabling software in China. You only need to install the software on the computer to monitor the USB devices inserted into the computer in real time, USB storage devices, such as USB flash drives and mobile hard disks, can be directly disabled. Non-USB storage devices, such as USB mouse and keyboard and dongle, will not be disabled, this achieves precise control over the use of USB devices.
There are many such USB port disabling software on the market. For example, there is a "portable to USB interface disabling software" (: http://www.grabsun.com/monitorusb.html), only after the computer installation can be completely shielded from the use of USB storage devices, this completely prevents copying files from a computer to USB flash drives, mobile hard drives, and other USB storage devices. At the same time, you can also prohibit sending email attachments, uploading files from online storage, sending files via QQ, and uploading Forum attachments. This can also prevent computer files from being leaked through the Internet. As shown in:
 
Figure: Disable USB flash drives on a computer. In addition, disable software from USB port allows you to disable Registry Modification and Group Policy Modification in real time, this can also prevent employees from trying to modify the key locations of the operating system to re-enable the USB flash drive and move the hard disk.
In short, whether it is through the operating system registry, group policy or through a dedicated USB port disabling software, you can achieve the purpose of shielding the USB storage device, relative to the operating system settings, disabling software through a dedicated USB flash disk is more direct and effective. Enterprises and institutions can choose based on their needs.