USB注册表限制法 ; b1 L( \* m" I' Q' o8 r0 d
问题:如何解决USB设备被禁止
% H5 a7 x* S( G, P1 |3 c) A( V回答:
2 C' V7 U( m) Y0 k: Q方法一,BIOS设置法
$ m' }. {4 K- |2 N
! n; B& [9 [* E: V9 `* n重新启动计算机,在开机过程中,点击键盘上的“Delete”键,进入BIOS设置界面,选择“Integrated Peripherals”选项,展开后将“USB 1.1 Controller”和“USB 2.0 Contr01ler”选项的属性设置为“Disableed”,即可禁用USB接口。最后别忘记给BIOS设置上一个密码,这样他人就无法通过修改注册表解“锁”上述设备了。 0 O% b" p3 {5 k4 {. ]
: y( ^6 D. B' J S' F3 v9 M方法二,注册表法(适用于Windows XP/2003)
# x0 g- Z1 A# I3 S" y5 L
) s- V. J# a$ G# q5 i& `: j, d6 E利用该方法可以锁定电脑上的USB接口,从而达到禁止他人使用闪盘或移动硬盘等可移动存储设备的目的。
% |( [$ G$ m4 s. x* v( V$ T在“运行”对话框中输入“regedit”,回车后,打开注册表编辑器,依次展开如下分支[HKEY_LOCAL_MACHINE\SYSTEM\CurrentCntrolSet\Services\USBSTOR],在右侧的窗格中找到名为“Start”的DWORD值,双击,在弹出的编辑对话框中将其数值数据修改为十六位进制数值“4”。点“确定”按钮并关闭注册表编辑器,重新启动计算机,使设置生效。重启后,当有人将USB存储设备连接到计算机时,虽然USB设备上的指示灯在正常闪烁,但在资源管理器当中就是无法找到其盘符,因此也就无法使用USB设备了。 ; k) P0 `1 y) D
提示:“Start”这个键是USB设备的工作开关,默认设置为“3”表示手动,“2”是表示自动,“4”是表示停用 , @, K9 u1 S% o5 b
t |) H) w$ H5 f$ w三,注册表限制法:
" ]9 A8 J" m7 E# x4 r如果电脑已经用过USB存储设备,那么禁止起来就更加方便了,直接使用注册表文件进行导入操作即可。
. o# {8 ?/ w% ~
; V: \8 O( ~/ {% f& i6 j2 P禁止使用USB存储设备的注册表内容如下: . s3 e& ]- B- b
Windows Registry Editor Version 5.00 ' {2 A- M) T+ D4 f* {. Y3 V6 R
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR] B. u* i" x, M" N( O/ U* y# d# x
"Type"=dword:00000001
# F5 L9 T- ~' v+ d- ~"Start"=dword:00000004 5 X. m5 [& K9 n" R
"ErrorControl"=dword:00000001 ( U. O4 U) a0 D
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
0 o7 J, c: m# r* S' Y C! k52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\
6 v' ~7 p; K% e5 y6 p, D5 s00,52,00,2e,00,53,00,59,00,53,00,00,00
& N* j( G8 y. H z"DisplayName"="USB 大容量存储设备"
2 A T& Y* d$ l[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security] * x* Z. k; N( L c
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ 5 K2 |4 z% |, S' N6 u' D8 f: v
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
6 I9 E8 h- Q, W( F& D00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
2 L. M% J W2 J2 U05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
. A; d+ q: h. u# K20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
' h# S/ g9 g& j0 H7 z" t V00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
) e* |0 y) B0 f: W! T! Y; E9 x00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 / S7 f4 R4 a. L
我们将上面的代码保存成一个以REG为后缀的文本文件,然后双击该文件导入注册表就完成了禁止该计算机使用USB存储设备的操作。所有用户都无法用USB存储设备了,这点和上面仅仅是根据用户或用户组来限制的方法是不同的,效果更好应用范围更广。 : O0 D/ V. |- c' b$ B% Q
7 v: ?* U- Y2 f3 S; }
开启USB存储设备使用权限的注册表内容如下:
( s) g9 p6 q5 x8 T, t* IWindows Registry Editor Version 5.00
7 x) `* b8 S5 {; z0 _( q[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
' Y! Z5 r5 z4 E( v* r( G+ m"Type"=dword:00000001 7 O, X$ r, K- L) @& W5 d T J
"Start"=dword:00000003 4 G1 A/ C' F2 j
"ErrorControl"=dword:00000001 - q5 m3 Y+ T) O: g2 U1 {0 u
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\ - C$ b. V# T- w- ?! y) F8 @& L* K& o
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\ / T" W/ Z2 |' m1 o6 J
00,52,00,2e,00,53,00,59,00,53,00,00,00 7 B; ], E+ b% l+ C N. \
"DisplayName"="USB 大容量存储设备"
# ^2 i1 d+ g# d% v( h; R[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security] * G2 g M, U& k {% c% U$ |4 @$ l
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ ( {0 L$ V) s' T! l" ~5 D5 f |
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ , e) x% V) z- U0 @ J
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 5 ?* H# \ ?3 s( f- `+ B1 F; n
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 7 n: n/ L7 `+ O8 n& S4 ^3 N8 Q- o
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ ( a; }4 N* K1 \5 j \) x' J8 `
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\ ( p1 d+ e" i8 `3 @' @7 r
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
- j( u' E* G; u4 P: S我们将上面的代码保存成一个以REG为后缀的文本文件,然后双击该文件导入注册表就完成了开启该计算机使用USB存储设备的操作。所有用户都可以使用USB存储设备。 |