Problem:Windows Server R2 How the domain control server disables clients using USB Removable Storage (client operating system requiresOperating systems above Windows Vista, the operating system below XP cannot disable USB Removable Storage.Callout: disabling USB Removable Storage device requirements for Windows Server
Windows 2003Domain ControllerUseGroup PolicyThe following describes how to disable USB:
1. Disable the usb registry directly.
Go
HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Services/USBSTOR
There is a key value named start on the right.
Double-click it and change the value to 4
With the development of technology, the data Backup program gives us a lot of choices, large companies will choose large hard disk or tape to back up the data, personal data Backup can choose mobile devices, such as mobile hard disk, U disk, CD-ROM, network disk (a service based on cloud computing), so, There are still a lot of people use U disk to save their own data, this article will teach you how to disable the U disk through
If you are using Windows Vista or Windows 7, you can directly use the Group Policy Function to reject installation of unfamiliar USB devices. The following uses Windows 7 as an example: Step 1: insert your USB device into your computer, and open the control panel, hardware, sound, device, and printer when all
Disable usb in Domain Policy and usb in Domain Policy
Documents and templates can be downloaded in http://pan.baidu.com/s/1qYTcjTy
Pro_usb_users.adm this template can be disabled to the specified drive letter, for user policy
Pro
How does one disable registry in a group policy?
"Start" command, open "run", pop up the "run dialog box", enter the "gpedit. msc" command,
Open the "Group Policy" dialog box and expand "user configuration"> "manage template"> "system" in the "
to the truth. Download the attachments in my blog. the attachment is the core of this article. Secondly, I would like to recommend that youDCInstall OnGpmcGroup policy management tools to help you troubleshoot group policy management.
Step 1: on the domain controller, click Start → run and enter "gpmc. msc" → Click OK to start
Group PolicyWhat is it? What are the skills of Group Policy in Windows Vista? A detailed explanation is provided below.
The most common cause for a group policy is its name, which is not a method for applying a policy to a
BecauseGroup PolicyYou can perform centralized Desktop Management to improve work efficiency. The importance of group policies in windows is self-evident for system administrators. The following describes how to use group policies to disable the system.Automatic playbackFunction to prevent the spread of USB flash drive
In windowsLocal Group PolicyIt is widely used in networks, and its role is self-evident for system administrators. However, sometimes we want to disable the Local Group Policy. This article describes how to disableWindows VistaMethod of the Local Group
Question: How do I disable a USB port device in a domain environment?The first: In the traditional way, disable USB in the BIOS.The second type:Microsoft Technical Support Answer: According to your needs, Windows recognized USB device mainly through two files, one is USBSTOR
USB flash drives attract many users to purchase and use with their convenience. This provides another carrier for the spread of Network viruses, nowadays, many viruses in the Internet are spread by using USB flash drives. After being infected with the USB flash drive virus, the computer system may not run normally. In severe cases, the computer may be paralyzed.
various software, computers, and user policies by using group policies.
Here, www.01yzh.com of Kunming National Defense Road Hospital simply says that the Group Policy setting is to modify the configuration in the registry. Of course, group policies use a better management and organization method to manage and config
Group PolicyIt is no stranger to users who often use computers. The following section describes three knowledge points about group policies, as described below.
First, temporarily hide unused group policies
If you are a beginner using group policies, you may be dazzled by a wide variety of policies in the
permission. When an expert tries to connect, the user still has the opportunity to accept or reject the connection (only the expert is allowed to view the user's desktop), so if remote control is enabled, the user can remotely control the desktop after clicking a button.
If you enable this policy setting, Remote Assistance will be provided to users who are logged on to this computer. You have two options for assisting people with Remote Assistance:
)
Recovery
Change the value of the Nocontrolpanel entry to 0 (if it is not valid, it is recommended to delete the item directly)
Note: If the registry cannot be opened, please use the above method to lift the registry.
Third, Group Policy disabling and recovery
Open the Registration form
Copy code code as follows:
[Hkey_current_user/software/policies/microsoft/mmc/{8fc0b734-a0e1-11d1-a7d3-0000f87571e
The existence of the default share facilitates some administrative work, but it does have a hidden problem, so how to see if the local PC has the default share enabled, and normal domain users can use the following command.
So how to disable it?
Use the following method to resolve.
1.1 Create ADM configuration, as follows, save as *.adm
CLASS MACHINE
CATEGORY!! Category1
CATEGORY!! Category2
Disable (enable) Group Policy with batch processing
REGSVR32/S/u gpedit.dll disabled
REGSVR32/S Gpedit.dll Enabled
Using this command alone can still prevent Group Policy from being used, but the result is that-
The Group
The AutoShareServer and autosharewks registry values under the Registry HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ LanmanServer \ Parameters are used by default. These shares are enabled by default, some informal installation systems may be disabled and need to be re-enabled. Edit the following to enable/disable the Registry file and import it to the registry using the Group
. Click the Start menu, enter "Gpedit.msc" in the search field, and start the Group Policy Editor.
▲ Figure 5 Starting the Group Policy Editor
Fifth step. Locate and expand the computer configuration → administrative Templates → system → device installation → device installation restrictions in turn.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.