[推荐]使用群組原則禁用USB PORT

tonyepaper

管理員很需要的....<br>
Custmom ADM temlpate for disabling USB<br>
Here is an adm file i have written. Import this into Active Direcotry the make two groups of<br>
allowed and disallowed PC's. Saves fiddling with 2000 PC's as we do this automatically<br>
through AD.<br>
Enable the GPO's for users you dont want to use usb and disable for those you do. Save the<br>
text below as a .adm file&#58;<br>
;USB Controller Security Template (JM 17/11/04)<br>
#if version <= 2<br>
#endif<br>
#if version >= 3<br>
CLASS MACHINE<br>
CATEGORY !!USBDevices<br>
POLICY !!usbehci<br>
#if version >= 4<br>
EXPLAIN !!Usbdeviceshelp<br>
#endif<br>
KEYNAME "SYSTEM\CurrentControlSet\Services\usbehci"<br>
VALUENAME "Start"<br>
VALUEON NUMERIC 4<br>
VALUEOFF NUMERIC 0<br>
END POLICY<br>
POLICY !!usbhub<br>
#if version >= 4<br>
EXPLAIN !!Usbdeviceshelp2<br>
#endif<br>
KEYNAME "SYSTEM\CurrentControlSet\Services\usbhub"<br>
VALUENAME "Start"<br>
VALUEON NUMERIC 4<br>
VALUEOFF NUMERIC 0<br>
END POLICY<br>
END CATEGORY<br>
[strings]<br>
USBDevices="HBS USB Security Settings"<br>
usbehci="USB Controller Security"<br>
usbhub="USB Root Hub Security"<br>
Usbdeviceshelp ="Contains settings to control the behavior of USB controller. Enabling this<br>
setting will disable USB for all users."<br>
Usbdeviceshelp2 ="Contains settings to control the behavior of USB Root Hub. Enabling this<br>
setting will disable USB for all users."

紫玄冰

怎么看都没有看明白，能不能放张图上来瞧瞧~~