Win7 Pure version 32-bit system How to disable a USB device in a Windows domain

1, first open Active Directory Users and Computers, and then select the OU that need to disable the USB device, and click the right mouse button to Group Policy;

2, then create a GPO for USB, and click Edit, open the Group Policy Editor;

3, go to Group Policy Editor, expand Computer Configuration in turn--"Windows Settings"--"Security Settings"-"File system";

4, then the right mouse button click "Add Files", pop-up "Add Files and Folders", in the "folder" column type "%systemroot%infusbstor.inf", and then click OK.

5, in the "Database security settings", delete all users, and add "Everyone", remove the default Allow "Read and execute", "List Folder Contents", "read", add reject "Full Control", and then click "Apply---OK";

6, in the "Add Objects" window, the default current settings, to edit security permissions, you can click "Edit security Settings" to reset, and click OK exit settings;

7, in addition, repeat 4, 5, 7 steps, to "%systemroot%infusbstor." Pnf&ldquo, then close the Group Policy Editor and use "Gpupdate/force" to force the refresh policy.

PS: The above can only be for the computer has not used USB to be effective, if the computer has used a U disk and other equipment, it will also need to modify the registry to achieve the purpose. The specific steps are as follows:

1 first open the Win7 system "start-run", in the Run dialog box input "regedit", enter open the registry;

2) then expand and navigate to the "Hkey_local_machinesystemcurrentcontrolsetservicesusbstor" entry in the open registry;

3) and then open the registry location above, we can see the key value of the start, you need to modify the key to 4, by default 3 (3 for manual, 2 for automatic, 4 for deactivation), to use Group Policy to deploy.