How to Use group policies to prevent startup of unfamiliar USB flash drives

USB flash drives must be used frequently in personal computers. As a convenient temporary storage device, USB flash drives are an indispensable means of file exchange, however, it also poses a great threat to personal computer data, not only the spread of viruses, but also the theft and plagiarism of other vicious events. Is there a way for the system to only use the specified USB flash disk or mobile hard disk, and prohibit other USB flash disks? We can use group policies to complete this task. You can set the system to only use the specified USB flash disk. Note: www.2cto.com-the implementation of this function is to block the installation of drivers on mobile storage devices with unknown hardware IDS by means of group policies. -For a removable storage device that is already in use and running on the computer, you only need to uninstall its driver on the Device Manager, and then insert it into the computer later, because it prevents the driver from being installed, to prevent startup. Implementation steps: Step 1: insert your USB flash drive so that the system can use the USB flash drive normally. Then, go to the control panel and open the Device Manager ", expand the "disk drive" in it to see your USB flash drive. Step 2: Right-click on the top and select "properties". In the displayed "properties" window, click the "details" tab, then select "hardware ID" in the "property" drop-down box of the device. The following "value" will show a string. This is the hardware ID of your USB flash drive. copy it and save it. Step 3: copy the hardware ID of "USB large capacity storage device" in "general serial bus controller" and expand the "general serial bus controller" list in "Device Manager, find the "USB high-capacity storage device" and click the "details" tab in its "properties" window. Copy the hardware ID and save it. (Note: you can write down the hardware IDs of all commonly used mobile storage devices of individuals to avoid unnecessary troubles. You can add new mobile devices in the future and write them down later) step 4 of www.2cto.com: Find the hardware ID of the USB flash drive and implement it through the Group Policy. Search for "run" in the Start Menu, click "run", or directly open the "run" window in Win + R, and enter "gpedit. msc, or open the Windows toolbox in the "utility" of the cube optimization master to find the Group Policy. Expand Computer Configuration> management template> system> device installation restrictions ". (1) Open "Prohibit installation of devices not described by other policies" on the right, select "enabled" in the pop-up window, and then click "OK. (2) Enable "allow devices that match the following device IDs" and set it to "enabled". In the "options" pane, click "show ", add the copied hardware IDs in step 3. Note: the setting of (2) takes effect only when (1) is set to "enabled". In this way, you can disable USB devices not described in the policy. Set successfully, no need to restart. When a new removable storage device is inserted (which has never been run on this computer), the following prompt is displayed during driver installation. Www.2cto.com Note: to add a new trusted mobile storage device, you only need to set (1) in Step 4 to "not configured" or "disabled ", then insert a new device to start the device, and add the hardware ID to (2. In the last sentence, the setting is risky and the operation should be cautious. This article is from the home of Windows 7