Shielding USB ports is often for one aspect: security. This security includes virus security and data security. The current USB flash memory virus is very embarrassing. At the same time, if you don't want someone to easily copy it with a USB flash drive, you have to block the USB port. For many companies, this demand is not small. Of course, whether it is a gentleman or a villain, it is unstoppable for computer masters.
Next, let's see how to block the USB port of Windows Vista system.
This article provides two methods, each method can refer to, see their own habits.
First, modify the registry manually
Change the registry key, including 3 ways, disable USB device startup, disable writing data to USB device, hide and prohibit viewing drive letter, the following description.
1. Open the registry editor: Win key + R key to open the running window to run regedit, or type regedit in the search bar of the Windows Vista start menu to open the registry editor. If the UAC prompt window pops up, click OK.
2, in the registry manager, navigate to HKEY_LOCAL_MacHINE\\SYSTEM\\CurrentCntrolSet\\Services\\USBSTOR, double-click the Start registry key in the right window, change the key value from 3 to 4, click OK (if To recover, change the Start registration value from 4 to 3 to use the USB device). In this way, after rebooting, you can disable the USB device to boot up. In the Explorer, you can't see the drive letter of the USB device, and naturally it is even more unusable. As shown in Figure 1:
Figure 1 Registry modification
Modify the registry to disable writing data to the USB device, you can also block the USB port, the implementation method is: open the registry editor, located in HKEY_LOCAL_MacHINE \\SYSTEM\\CurrentControlSet\\Control\\StorageDevicePolicIEs, create a DWord entry in the right window, named WriteProtect, the value is 1; if there is no such registry branch, you can create a branch first (change the value back to 0 to be able to Write USB data, otherwise you can only read the data in the USB device). Confirm it after modification. After restarting the machine, any error message will be displayed if you want to write data to the USB device. as shown in picture 2.
Figure 2 Modify the value
Modify the registry to hide and prohibit the view of the drive letter also to block the purpose of the USB port, the implementation method is: open the registry editor, navigate to HKEY_CURRENT_USER\\software\\micosoft\\Windows \\CurrentVersion\\Ploicies\\Explorer, create a new binary registry key NoDrives, its value 00 00 00 00 means not to hide any drive, set its value to 00 ff ff ff to hide the I to Z disk, so you can not see in the Explorer Go to the I to Z disk; create a new binary item NoVIEwOnDrive whose value is set to 00 ff ff ff, and the target of the ban is reached. (Change the value of each item to 00 00 00 00, then you can use the USB device again. ).
You can create a restricted account in Vista. The account has no permission to modify the registry, and then send it to everyone. The USB device in this account can be used, so no one can Use the change back in the small prompt to set it up.
Second, the method of prohibiting the USB driver
If the computer has not installed a USB device, pair the user or component with the "reject" permission of the Usbstor.pnf, Usbstor.inf file, you can prohibit some users from installing the USB driver. The program, so as to achieve the purpose of disabling, but the premise is that the system disk must be NTFS format, the implementation method is: open the "Windows\\inf" directory under the system disk, there is a Usbstor.pnf file, select it and right click on the "Properties" command, Click the "Security" tab, select the user or group to be disabled in the "User or group name" box, check "Reject" after "Full Control" in the permissions of the user group, and finally click OK, such as image 3. In the same way, the Usbstor.inf file is treated similarly. At this point, users in this group will not be able to install the USB device driver and will not be able to use the USB port.
Figure 3 Permission Settings
Summary:
In addition to the registry modification and prohibition of the USB driver to limit the use of the USB port, there are ways to use the disable function provided by third-party software. In short, each method has its advantages and disadvantages, and interested friends may wish to experience it!