Prohibit the use of USB flash drives and mobile hard drives by using group policies

 

For the sake of security and confidentiality, the company needs to disable USB ports on all clients (except for some computers) without affecting the normal use of the mouse, keyboard, and printing devices on the USB interface, so how to implement it? The group policy is applied in the domain environment to prohibit the use of USB flash drives or mobile hard disks.

1. decompress the usb group policy package and copy usb. adm to the C: \ WINDOWS \ inf directory.

2. Open "run" and enter "gpmc. msc" (you can download gpmc. msc at http://down.51cto.com/data/141338) to open "Group Policy Management"

1) In the left-side console tree, right-click the domain wanxing.cn and choose create GPO. The name is: Disable the use of USB flash drives and mobile hard drives.
 

2) Right-click the "Disable the use of USB flash drives and mobile hard drives" policy and select "edit" to open the "Group Policy Editor"

3) expand computer configuration> management template in the left-side console tree, right-click "manage template", and select "Add/delete template"

4) Click "add" in "Add/delete template" to find the usb. adm file, select it, and disable
 

5) Click "View"> "filter" to open the "filter" dialog box and cancel the check mark before "only display fully managed Policy Settings ".
 

6) The "Custom Policy Settings" item is displayed in the left-side console tree: Computer Configuration → management template.
 

7) Click to expand "Custom Policy Settings" → "Restrict Drives", including software Drives, optical Drives, and USB Drives.

8) in the details pane on the right, double-click the "Disable USB" policy item, select the "Enabled" check box in the pop-up dialog box, and select "Enabled" for "Disable USB Ports". OK
 

3. Enter cmd in "run", open the command prompt, and then enter gpupdate/force (manually update the group policy so that the policy takes effect immediately)

This article is from the "300second" blog