How to prevent others from using USB flash drives

USB flash drives, mobile hard drives, and other devices are often disabled in companies, schools, and Internet cafes for various reasons, such as preventing employees from taking confidential information away, prevent students from bringing games to the school data center .......
Many of my friends may use USB management experts or other software that specifically restricts the use of USB flash drives. However, many of them are charged...

Here is a tips for disabling a USB flash drive without using professional software:

Method 1. BIOS setting method)

Go to BIOS settings, select the "Integrated Peripherals" option, and then set the "USB 1.1 Controller" and "USB 2.0 Contr01ler" options to "Disableed" to disable the USB interface. Finally, do not forget to set a password for the BIOS, so that others will not be able to "Lock" the above device by modifying the registry.

Note: This method completely disables the USB interface. That is to say, all USB interfaces cannot be used, including USB disks and mobile disks. This method is too aggressive, please use it with caution.

Method 2: Disable the startup of a flash drive or mobile hard drive (applicable to Windows XP/2000/2003)
　　
Open the Registry Editor, expand the following branch [HKEY_LOCAL_MACHINESYSTEMCurrentCntrolSetServicesUSBSTOR], find the DWORD Value "Start" in the right pane, and double-click, in the displayed edit dialog box, change the value to the hexadecimal value "4 ". Click OK to close the Registry Editor and restart the computer for the settings to take effect. When a USB storage device is connected to a computer, although the indicator on the USB device is flashing normally, its drive letter cannot be found in the resource manager, therefore, the USB device cannot be used.

Method 3: Hide drive letters and disable viewing (applicable to Windows)

Open the Registry Editor and expand the following branch [HKEY_CURRENT_USERsoftwareMicrosoftWindowsCurrentVersionPloiciesExplorer]. Create the binary value "NoDrives". The default value is 00 00 00, indicating that no drive is hidden. The key value consists of four bytes. each bit of each byte corresponds to A disk from A: to Z:. When the corresponding bit is 1, the corresponding drive in www.x-force.cn "my computer" is hidden. The first byte represents the eight disks from A to H, that is, 01 is A, 02 is B, 04 is C ...... Likewise, the second byte represents I to P, the third byte represents Q to X, and the fourth byte represents Y and Z. For example, to disable drive C, change the key value to 04 00 00 00; To disable drive D, change to 08 00 00 00; To disable drive C and drive D, then it is changed to 0C 00 00 00 (C is in hexadecimal format, and it is changed to 12 in decimal format ).

After understanding the principle, the following uses my computer as an example to describe how to operate: My computer has a soft drive, a hard drive (five partitions), and an optical drive. The drive letter distribution is as follows: a: (3.5 floppy disk), C:, D:, E:, F:, G:, H: (CD ), so my "NoDrives" value is "02 ff", hiding B, I to Z disk.

After restarting the computer, insert a USB flash drive, which is invisible to my computer, but enter I in the address bar: (H is the last drive letter after the power of my computer) you can still access the Mobile Disk. Now, we can see that "NoDrives" is just a blind method, so we have to take one more step, that is, to create a new binary "NoViewOnDrive" and change the value to "02 ff ", that is to say, the value is the same as "NoDrives. In this way, neither the USB flash drive nor the USB flash drive can be accessed.

Method 4: Disable USB Driver Installation

In Windows Resource Manager, go to the "System Disk: WINDOWSinf" directory and find the name "Usbstor. pnf file, right-click the file, select "properties" from the pop-up menu, switch to the "Security" tab, and select the user group to be disabled in the "Group or user name" box, in the user group permission box, select the "deny" check box next to "full control" and click "OK.

Then, use the preceding method to find the "usbstor. inf" file and set it on the Security tab to deny access to the group's users. The operation process is the same as above. After the preceding settings are complete, the user in the group cannot install the USB device driver, so as to disable the driver.

Note: To use the access control list (ACL), you must use the NTFS file system.

PS: Don't say these methods are easily cracked or something ~~~ It's great to block most common users ~ After all, there are too many experts in this year ~~~