Win7 prohibits the operation of the USB interface

Is there any way to prevent the USB interface from running directly on the computer? If you are using Win7, you can disable the USB interface by simply running Group Policy.
One, open "Control Panel - Hardware and Sound - Device Manager", expand the Universal Serial Bus controller list in Device Manager, find the USB mass storage device, open the properties, select the details in the navigation bar The information, copied out of its hardware ID, is also saved in Notepad.
Second, plug the USB device that you use often into the computer. After the device enters the normal running state, “Open the control panel hardware and sound device and printer”, all the devices can be seen in this window.
Right-click on a USB device, select Properties, select “Hardware-Properties" in the window to open, select “Details", select “Hardware ID Item", copy and save the ID code Go to Notepad.
Third, open the Run dialog box, enter gpedit.msc, then the Group Policy window will pop up, expand "Computer Configuration - Administrative Templates - System - Device Installation - Device Installation Restrictions", open "Allow Installation" The following device IDs match the device", in the “ Enabled” point as a real point, click the display button to paste the device ID previously saved in the notebook.
Finally, select to disable the installation of devices not described by other policy settings, select Enabled in the pop-up window, select OK and exit.
The above group policy settings prohibit the operation of the USB interface, which can ensure the security of the Windows 7 system and prevent unnecessary intrusion of the USB virus.