Prohibiting the use of USB ports can be done in two ways, using the "Registry Editor" and "Group Policy Editor" tools, which are standard utilities of the Microsoft Windows operating system. True, the latter method will require a fairly extensive knowledge of computer resources.
Instructions
Step 1
Click the "Start" button to bring up the main menu of the system and go to the "Run" item to launch the "Registry Editor" tool.
Step 2
Expand the HKEY_LOCAL_MACHINE / System / CurrentControlSet / Services / UsbStor registry key and find the Start parameter to perform the USB closing operation.
Step 3
Call the service menu of the selected Start parameter by double-clicking the mouse and enter the value 4 in the "Change DWORD Parameters" dialog box that opens.
Step 4
Click OK to execute the command and close the Registry Editor utility.
Step 5
Return to the main Start menu and go to Run to launch the MMC.
Step 6
Enter cmd in the Open field and click OK to confirm your choice.
Step 7
Create a file with the extension.adm and the following value:
CLASS MACHINE
CATEGORY !! category
CATEGORY !! categoryname
POLICY !! policynameusb
KEYNAME "SYSTEM / CurrentControlSet / Services / USBSTOR"
EXPLAIN !! explaintextusb
PART !! labeltextusb DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !! Disabled VALUE NUMERIC 3 DEFAULT
NAME !! Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !! policynamecd
KEYNAME "SYSTEM / CurrentControlSet / Services / Cdrom"
EXPLAIN !! explaintextcd
PART !! labeltextcd DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !! Disabled VALUE NUMERIC 1 DEFAULT
NAME !! Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !! policynameflpy
KEYNAME "SYSTEM / CurrentControlSet / Services / Flpydisk"
EXPLAIN !! explaintextflpy
PART !! labeltextflpy DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !! Disabled VALUE NUMERIC 3 DEFAULT
NAME !! Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
POLICY !! policynamels120
KEYNAME "SYSTEM / CurrentControlSet / Services / Sfloppy"
EXPLAIN !! explaintextls120
PART !! labeltextls120 DROPDOWNLIST REQUIRED
VALUENAME "Start"
ITEMLIST
NAME !! Disabled VALUE NUMERIC 3 DEFAULT
NAME !! Enabled VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
category = "Custom Policy Settings"
categoryname = "Restrict Drives"
policynameusb = "Disable USB"
policynamecd = "Disable CD-ROM"
policynameflpy = "Disable Floppy"
policynamels120 = "Disable High Capacity Floppy"
explaintextusb = "Disables the computers USB ports by disabling the usbstor.sys driver"
explaintextcd = "Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
explaintextflpy = "Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
explaintextls120 = "Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
labeltextusb = "Disable USB Ports"
labeltextcd = "Disable CD-ROM Drive"
labeltextflpy = "Disable Floppy Drive"
labeltextls120 = "Disable High Capacity Floppy Drive"
Enabled = "Enabled"
Disabled = "Disabled"
Import it into Group Policies.
Step 8
Call the context menu of the Group Policy Editor by clicking the right mouse button and select the "View" item.
Step 9
Select Filtering and clear the Show only managed policy settings check box.
Step 10
Click OK to apply the selected changes.
