How to disable a USB port device from a Windows domain environment

1, open Active Directory Users and Computers;

2, select the need to disable the USB device OU, and click the right mouse button to Group Policy;

3, create a GPO for USB, and click Edit, open Group Policy Editor;

4, into the Group Policy Editor, expand Computer Configuration, Windows settings, security settings, file system, and so on;

5, right click on "Add Files", pop-up "Add Files and Folders", in the "folder" column input "%systemroot%infusbstor.inf", OK; you see the article from the Active Directory

6, in the "Database security settings", delete all users, and add "Everyone", remove the default Allow "Read and execute", "List Folder Contents", "read", add reject "Full Control";

7, in the "Add Objects" window, the default current settings, to edit security permissions, you can click "Edit security Settings" to reset, confirm, exit settings;

8, in addition, repeat 5, 6, 7 steps, to "%systemroot%infusbstor." PNF "to set up;

9, close the Group Policy Editor;

10, the use of "Gpupdate/force", forced to refresh the policy.

Hkey_local_machinesystemcurrentcontrolsetservicesusbstor

Under Windows 2000, the key value is Hkey_local_machinesystemcurrentcontrolsetservicesusbhub,

Open the registry location above, we can see the key value of start, you need to modify the key to 4, by default, 3 (3 for manual, 2 for automatic, 4 for deactivation), to use Group Policy to deploy,