How to implement the Prohibit USB interface to run directly

Is there any way to stop the USB interface running directly in the computer? If you are using Win7, it is simple to disable the USB interface through Group Policy.

Open the Control Panel-hardware and sound-Device Manager, expand the list of universal serial Bus controllers in Device Manager, locate USB mass storage devices, open properties, select details in the navigation bar, copy its hardware ID, and save Notepad.

Second, the use of their own frequently used USB devices into the computer, the device into the normal state of operation, "open Control Panel hardware and sound devices and printers," in this window you can see all the devices.

Right-click a USB device, select Properties, select "Hardware-Properties" in the open window, select "Details", select "Hardware ID Entries", and copy and save the ID code in Notepad.

Open the Run dialog box, when you enter Gpedit.msc, the Group Policy window pops up, expand Computer Configuration-Administrative Templates-system-device installation-device installation restrictions, turn on "Allow devices that match the following device IDs to be installed", and click the Display button at the "Enabled" point as a solid point. Paste the device ID that you saved in Notepad.

Finally, you choose to prohibit the installation of devices that are not described by other policy settings, select Enabled in the pop-up window, and then exit after you select OK.

The above Group Policy setting, prohibit the USB interface to run, can guarantee the WINDOWS7 system security, prevent the USB virus intrusion and bring unnecessary trouble.