标题: [推荐]使用群組原則禁用USB PORT [打印本页] 作者: tonyepaper 时间: 2005-5-13 21:50 标题: [推荐]使用群組原則禁用USB PORT 管理員很需要的....<br>
Custmom ADM temlpate for disabling USB<br>
Here is an adm file i have written. Import this into Active Direcotry the make two groups of<br>
allowed and disallowed PC's. Saves fiddling with 2000 PC's as we do this automatically<br>
through AD.<br>
Enable the GPO's for users you dont want to use usb and disable for those you do. Save the<br>
text below as a .adm file:<br>
;USB Controller Security Template (JM 17/11/04)<br>
#if version <= 2<br>
#endif<br>
#if version >= 3<br>
CLASS MACHINE<br>
CATEGORY !!USBDevices<br>
POLICY !!usbehci<br>
#if version >= 4<br>
EXPLAIN !!Usbdeviceshelp<br>
#endif<br>
KEYNAME "SYSTEM\CurrentControlSet\Services\usbehci"<br>
VALUENAME "Start"<br>
VALUEON NUMERIC 4<br>
VALUEOFF NUMERIC 0<br>
END POLICY<br>
POLICY !!usbhub<br>
#if version >= 4<br>
EXPLAIN !!Usbdeviceshelp2<br>
#endif<br>
KEYNAME "SYSTEM\CurrentControlSet\Services\usbhub"<br>
VALUENAME "Start"<br>
VALUEON NUMERIC 4<br>
VALUEOFF NUMERIC 0<br>
END POLICY<br>
END CATEGORY<br>
[strings]<br>
USBDevices="HBS USB Security Settings"<br>
usbehci="USB Controller Security"<br>
usbhub="USB Root Hub Security"<br>
Usbdeviceshelp ="Contains settings to control the behavior of USB controller. Enabling this<br>
setting will disable USB for all users."<br>
Usbdeviceshelp2 ="Contains settings to control the behavior of USB Root Hub. Enabling this<br>
setting will disable USB for all users."作者: 紫玄冰 时间: 2005-5-14 21:28 标题: re:怎么看都没有看明白，能不能放张图上来瞧瞧... 怎么看都没有看明白，能不能放张图上来瞧瞧~~