How to disable USB flash drives in the registry, how to disable USB flash drives in the Group Policy, and how to disable USB flash drives in the computer

How to disable USB flash drives in the registry, how to disable USB flash drives in the Group Policy, and how to disable USB flash drives in the computer
To prevent USB flash disks from being leaked, we sometimes need to disable USB flash disks and block the use of mobile hard disks.
 
How can I disable USB storage devices such as USB flash drives and mobile hard disks? Many people disable the use of USB ports in the computer BIOS. Although USB storage devices such as USB flash drives and mobile hard disks can be completely disabled, many computers use USB mouse and keyboard, therefore, these non-USB storage devices cannot be used. Therefore, it is not feasible to disable the U port through BIOS. The following two methods are described:
 
Method 1: Disable the USB storage device through the registry without affecting the use of non-USB storage devices.
 
Principle: After the system is installed, the mouse and other USB devices are installed, and then in the Registry
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ UsbStor
You can change the "Start" value to 4, 4 is disabled, and 3 is enabled.
 
There are two situations:
 
1. If a USB storage device is not installed on the computer
 
If you have not installed a USB storage device on your computer, pair the user or component with the "deny" permission for the following files:
 
? % SystemRoot % \ Inf \ Usbstor. pnf
? % SystemRoot % \ Inf \ Usbstor. inf
In this way, you will not be able to install USB storage devices on your computer. To "deny" permissions on the user or component pair Usbstor. pnf and Usbstor. inf files, follow these steps:
1. Start Windows Resource Manager and find the % SystemRoot % \ Inf folder.
2. Right-click the "Usbstor. pnf" file and click "properties ".
3. Click the Security tab.
4. In the "Group or user name" list, click the user or group for which you want to set the "deny" permission.
5. In the "UserName or GroupName permission" list, click to select the "deny" check box next to "full control", and then click "OK ".
Note: you also need to add the system account to the "deny" list.
6. Right-click the "Usbstor. inf" file and click "properties ".
7. Click the Security tab.
8. In the "Group or user name" list, click the user or group for which you want to set the "deny" permission.
9. In the "UserName or GroupName permission" list, click to select the "deny" check box next to "full control", and then click "OK ".
 
2. If a USB storage device is installed on the computer
 
Warning improper use of Registry Editor or other methods may cause serious problems. These problems may require you to reinstall the operating system. Microsoft cannot guarantee that you can resolve these problems. You are at your own risk to modify the registry. If a USB storage device has been installed on your computer, set the "Start" value in the following registry key to 4:
 
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ UsbStor
In this way, when a user connects a USB storage device to a computer, the device cannot run. To set the "Start" value, follow these steps:
 
1. Click start and then click Run ".
2. In the open box, type regedit and click OK ".
3. Find and click the following registry key:
HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ UsbStor
4. In the right pane, double-click Start ".
5. In the value data box, type 4, click hexadecimal (if not selected), and then click OK ".
6. Exit the Registry Editor.
 
Method 2: The software is disabled by a dedicated USB flash drive and a USB storage device.
 
If you think it is troublesome to modify the registry, you can also use a dedicated computer USB port to disable the software. At present, there are many software programs in China that specifically prohibit the use of USB flash drives and shield USB storage devices. For example, there is a "portable to USB port management software" (: http://www.grabsun.com/monitorusb.html), you only need to install the computer, you can automatically disable the use of USB storage devices, USB mouse and keyboard, USB shield, and USB printer are not disabled, which can effectively protect computer file security and prevent copying data through USB flash disks. As shown in:
Figure: forbidden U port Software
At the same time, you can use "Disable software from USB port" to disable sending emails to computers, uploading files to network disks, uploading Forum attachments, uploading FTP files, and sending files via QQ, fully protects computer file security and prevents network leakage.

Figure: Prohibit uploading of computer emails, online storage, forums, and FTP files
In addition, portable to USB shielding software can also prohibit portable wifi, prohibit optical drive burning, only allow computers to access certain websites, and only allow computers to run certain programs, further regulate the use of computers by employees, this further protects computer files.