Shulou(Shulou.com)06/01 Report--

This article is about how to disable USB drives and removable hard drives. The editor thinks it is very practical, so share it with you as a reference and follow the editor to have a look.

Method 1, BIOS setting method (quick knife cutting random anaesthesia method)

Enter the BIOS settings, select the "Integrated Peripherals" option, and then set the properties of the "USB 1.1 Controller" and "USB 2.0 Contr01ler" options to "Disableed" to disable the USB interface. Finally, don't forget to set a password for BIOS so that others can't unlock the device by modifying the registry.

Note: this method completely prohibits the USB interface, which means that all kinds of USB devices can not be used, of course, including USB disk and mobile disk. As this method is too overbearing, please use it with caution.

Method 2, disable the boot of flash drive or removable hard disk (applicable to Windows XP/2000/2003)

Open Registry Editor, expand the following branch [HKEY_LOCAL_MACHINESYSTEMCurrentCntrolSetServicesUSBSTOR], find the DWORD value named "Start" in the right pane, double-click, and change its numerical data to the hexadecimal value "4" in the pop-up editing dialog box. Click the OK button and close the Registry Editor to restart your computer for the settings to take effect. After reboot, when someone connects the USB storage device to the computer, although the light on the USB device is flashing normally, the drive letter cannot be found in Explorer, so the USB device cannot be used.

Method 3: hide the drive letter and disable viewing (for Windows systems)

Open the registry editor, expand the following branch [HKEY_CURRENT_USERsoftwareMicrosoftWindowsCurrentVersionPloiciesExplorer], and create a new binary value "NoDrives". The default value is 00 00 00, indicating that no drives are hidden. The key value consists of four bytes, and each bit of each byte corresponds to a disk from A: to Z:. When the corresponding bit is 1, the corresponding drive in my computer is hidden. The first byte represents the 8 disks from A to H, that is, 01 is A, 02 is B, 04 is C. And so on, the second byte represents I to P, the third byte represents Q to X, and the fourth byte represents Y and Z. For example, to close C disk, change the key value to 04 00 00 00; to close D disk, change to 08 00 00 00; if you want to close C disk and D disk, change to 0C 00 00 (C is hexadecimal, convert to decimal is 12).

After understanding the principle, the following take my computer as an example to explain how to operate: my computer has a floppy drive, a hard disk (5 partitions), an optical drive, the disk letter distribution is like this: a: (floppy disk), C:, D:, E:, F:, G:, H: (CD), so my "NoDrives" value is "02 ff ff ff", hiding B, I to Z disk.

After restarting the computer, insert the flash drive, which is not visible in my computer, but you can still access the mobile disk by typing I: (the drive letter after my computer is H) in the address bar. Up to now, everyone can see that "NoDrives" is just a trick, so we have to go one step further, that is, to create a new binary "NoViewOnDrive" with a value of "02 ff ff ff", that is to say, its value is the same as that of "NoDrives". As a result, you can neither see the flash drive nor access the flash drive.

Method 4, prohibit the installation of USB drivers

In Windows Explorer, go to the "system disk: WINDOWSinf" directory, find the file named "Usbstor.pnf", right-click the file, select "Properties" from the pop-up menu, then switch to the "Security" tab page, select the user group you want to prohibit in the "Group or user name" box, and then in the permissions box of the user group, select the deny check box after "full Control". Finally, click the OK button.

Then use the above method to find the "usbstor.inf" file and set it in the security tab to deny access to the group of users. The procedure is the same as above. Once the above settings are completed, users in this group will no longer be able to install the USB device driver, thus achieving the goal of disabling it.

Note: to use access control lists (ACL), use the NTFS file system.

Thank you for reading! This is the end of the article on "how to disable USB drives and removable hard drives". I hope the above content can be of some help to you, so that you can learn more knowledge. If you think the article is good, you can share it out for more people to see!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.