Leverage Windows 7 permissions to indirectly enhance system security.

Under Windows XP system, the user restricts the use of USB devices, the first consideration is to prohibit their automatic playback, in order to avoid Trojan virus intrusion. But most of the time, such a method is not very effective. If you are a Windows 7 user, you can control the automatic operation of the USB device from the source by its exclusive "rights control" technology.

So, how can you control from the source?

Everyone should know that when a USB device is plugged into a computer host, a later time, the system will be prompted to use the XX device, this process is actually system recognition, and for USB device installation drive process. We can take advantage of the privilege control features of Windows 7 to prevent it from automatically identifying and installing drivers, so that you can achieve the purpose of controlling the source.

Go to the "X:windowsinf" directory (X: The partition Letter for Windows 7), and find "Usbport." PNF "and" Usbstor.inf "files, and then set the corresponding group or user property security permissions to" Deny "respectively. To set the "Usbstor.inf" as an example:

Right-click the "usbstor.inf" file, switch the Austrian Security tab in the pop-up dialog box, and set the system default group or user "system" Full Control permission to deny.

Set the Full Control permission for the corresponding group or user to deny

In the above illustration, system is completely controlled by default, and the user can enter the settings boot window by using the "Advanced" button below. Do not repeat here.

Editorial Reviews:

This method can control the self installation of a USB device from the source, but accordingly, when you insert the device into the computer host, the system will be "deaf" and do not respond to your insertion behavior. Accordingly, the author suggests that the user should elevate the privileges for their common users, so that they get "Full Control" permission to achieve the effect of flexibility. (Do you know why you should give your users elevated privileges?)