1, the use of their own frequently used USB devices into the computer, the device into the normal state of operation, "open Control Panel hardware and sound devices and printers," in this window you can see all the devices.
Right-click a USB device, select Properties, select "Hardware-Properties" in the open window, select "Details", select "Hardware ID Entries", and copy and save the ID code in Notepad.
2. Open the Control Panel-hardware and sound-Device Manager, expand the list of universal serial Bus controllers in Device Manager, find USB mass storage devices, open properties, select details in the navigation bar, copy its hardware ID, and save Notepad.
3, open the Run dialog box, when you enter Gpedit.msc, the Group Policy window pops up, expand Computer Configuration-Administrative Templates-system-device installation-device installation restrictions, turn on "Allow devices that match the following device IDs to be installed", and click the Display button at the "Enabled" point as a solid point. Paste the device ID that you saved in Notepad.
Finally, you choose to prohibit the installation of devices that are not described by other policy settings, select Enabled in the pop-up window, and then exit after you select OK.
Under Windows7 system, users can set Group Policy, limit the designated U disk in the system to run, so you can determine the security of U disk, but also to ensure the security of Windows7 system, to prevent the use of strange u disk to bring the virus.