Use Windows 7 permissions to indirectly improve system security.

Under Windows XP, the first thing users consider to limit the use of USB devices is to prohibit them from playing automatically to avoid Trojan virus intrusion. But many times, this method is not very effective. If you are a Windows 7 user, you can control the automatic operation of the USB device from the source through its unique "privilege control" technology.
So, how can we control from the source?
We should all know that when the USB device is plugged into the host computer, the system will prompt that the XX device is ready for use after a while. This process is actually system identification, and The process of installing a driver for a USB device. We can take advantage of Windows 7's unique permission control feature, prohibiting it from automatically recognizing and installing the driver, so that it can achieve the purpose of controlling the source.
Enter “X:Windowsinf” directory (X: is the partition letter of Windows 7), find the "usbport.PNF" and "usbstor.inf" files respectively, and then corresponding to the corresponding "ldquo; Group or User" attribute security permissions set to “reject”. Take the setting "usbstor.inf" as an example:
Right click on the “usbstor.inf” file, in the pop-up dialog box, switch to the "Security" tab, the system default group or user "ld"; SYSTEM”<;Full Control" permission is set to “Reject”.



Set the full control permission of the corresponding group or user to "Reject". In the above figure, SYSTEM is completely controlled by default, and the user can use the "Advanced" button below. Go to the setup boot window. I will not go into details here.
Edit Comment:
This method can control the self-installation of USB devices from the source, but correspondingly, when you plug the device into the computer host, the system will be "mute", for you The insertion behavior does not respond. Correspondingly, the author suggests that users should upgrade their permissions for their favorite users, so that they get the “full control” permission to achieve a flexible effect. (Do you know why you want to give your users elevated privileges?)