域策略__usb外设禁用

《域策略__usb外设禁用》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、有一个usb_stop・adm的策略模板的方法木人在机器上测试通过。以下文字存为usb.adm文件。开始，此线不算CLASSMACHINECATEGORY![categoryCATEGORY!!categorynamePOLICY!!policynameusbKEYNAMEz/SYSTEMCurrentControlSetServicesUSBSTOR/zEXPLAIN!!explaintextusbPART!llabcltcxtusbDROPDOWNLISTREQUIREDVALUENAM

2、E"Start"ITEMLISTNAME!!DisabledVALUENUMERIC3DEFAULTNAME!!EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYPOLICY!!policynamecdKEYNAME〃SYSTEMCur'i'cntContr'olSctScrviccsCdi'onTEXPLAIN!lexplaintextcdPART!!labeltextcdDROPDOWNLISTREQUIREDVALUENAME"Start"I

3、TEMLISTNAME![DisabledVALUENUMERIC1DEFAULTNAME![EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYPOLICY!!policynameflpyKEYNAME，zSYSTEMCurrentControlSetServicesFlpydisk/，EXPLAIN!!explaintextflpyPART!!labeltextflpyDROPDOWNLISTREQUIREDVALUENAME"Start"ITE

4、MLISTNAME![DisabledVALUENUMERIC3DEFAULTNAME!!EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYPOLICY!!policynamelsl20KEYNAME，zSYSTEMCurrentControlSetServicesSfloppyEXPLAIN!!explaintextlsl20PART!!labeltextlsl20DROPDOWNLISTREQUIREDVALUENAME"Start"ITEML

5、ISTNAME![DisabledVALUENUMERIC3DEFAULTNAME![EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYENDCATEGORYENDCATEGORY[strings]category二〃CustomPolicySettings"categoryname二〃RestrictDrives'7policynameusb=z/DisableUSB"po1icynamccd=z，DisableCD-ROM"policynameflp

6、y=，/DisableFloppy"policynamelsl20=/zDisableHighCapacityFloppy"explaintextusb二〃DisablesthecomputersUSBportsbydisablingtheusbstor.sysdriver"explaintexted二〃DisablesthecomputersCD-ROMDrivebydisablingtheedrom・sysdriver"explaintextflpy=/zDisablesthecomputer

7、sFloppyDrivebydisablingtheflpydisk.sysdriver'7explaintextlsl20=z，DisablesthecomputersHighCapacityFloppyDrivebydisablingthesfloppy.sysdriver'7labeltextusb=，/DisableUSBPorts"labeltextcd=/zDisableCD-ROMDrive"labeltextflpy=，zDisableFloppyDrive"labeltextls

8、l20=z，DisableHighCapacityFloppyDrive"Enab1ed=/zEnab1cd〃Disabled二〃Disabled"结朿，此线不算第一步：我们我们在域控制器上点击开始一运行输入“GPMC.MSC”一点击确定启动组策略管理。运行囚需號驚;耀跖罷更Internet资源的名打开(Q):第二步：打开组策略管理，右键点击zhp.com-点击“创建并链接(GP0)”一输入组策略名称“禁止USB”o因为我们这次的策略是希望企业内所冇计算机都应用，故我们在域级别上创