Win7 Academy: Using Group Policy to Block Unfamiliar USB Drives

  
        U disk must be used frequently as a convenient temporary storage device. U disk is an indispensable means of file exchange. It is set as a temporary file storage device, but it also poses a great threat to personal computer data, not only The danger of virus transmission may also lead to vicious incidents such as theft and plagiarism.
Is there any way to make the system only use the specified U disk or mobile hard disk, and prohibit other U disk?
We can accomplish this task through Group Policy. By setting it, the system can only use the specified USB flash drive.
Note:
— This function is implemented by the limitation of Group Policy, which prevents the installation of the driver of the mobile storage device with unknown hardware ID, so as to prevent its use.
— For a removable storage device that is already in use and running on this computer, simply uninstall its driver on the device manager and insert it later, preventing it from starting due to blocking its driver installation. purpose.
Implementation steps:
Step 1: Insert your U disk first, let the system use the U disk normally, then enter the “Control Panel” and open the “Device Manager”. “Disk drive”, you can see your U disk inside.
Step 2: Click the right mouse button to select “Properties", click the “details" label in the pop-up "Properties" window, and then in the device"properties” drop down box Select “Hardware ID”, the following "value" will appear in the string, this is the hardware ID of your U disk, copy it and save it.

Step: also need to copy & ldquo; Universal Serial Bus Controller & rdquo; in & ldquo; USB mass storage device & rdquo; hardware ID, the & ldquo; device manager & rdquo; expand & ldquo; General Serial Bus Controller & rdquo; list, find "USB Mass Storage Device", click on the "Details" tab in its "Properties" window, copy its hardware ID and save it.

(Note: You can remember all individuals under common hardware ID removable storage devices, in order to avoid unnecessary trouble, add new removable device in the future, may further write down, post-added)
The fourth step: find the hardware ID of the U disk and then implement it through Group Policy.
Search for "Run" in the Start menu, click Run, or open Win+R to open the "Run" window, enter "lded;.gpedit.msc", or in the Rubik's Cube Optimizer's "Utilities" Open the "Windows System Toolbox" and find the group policy.


Expand & ldquo; Computer Configuration & rarr; Administrative Templates & rarr; system & rarr; equipment installation & rarr; Device Installation Restrictions & rdquo ;.
(1) Open the right side of the "Do not install devices not described by other policy settings", select "ld" in the pop-up window, and then click the "OK" button.
(2) Then open “Allow installation of devices that match the following device IDs, set to “enabled", in the "options" pane, click “display” The copied hardware IDs in the third step are added separately.

Note: Only (1) is set to & ldquo; enabled & rdquo; under the premise, (2) is set to take effect, so you can disable USB device policy since not described.
The setup is successful and no restart is required. When inserting a new removable storage device (which has never been run on this computer), during the installation of the driver, the following prompt pops up and successfully blocked.

Copyright © Windows knowledge All Rights Reserved