USB注册表限制法
: r& E9 s# Y- ?5 A+ s问题:如何解决USB设备被禁止
5 a6 r5 ?0 ^; G8 v* a回答:
. T7 s: z/ @( w' ?4 @5 U# _方法一,BIOS设置法
( v& l/ F. U/ z
9 } u- C2 X* k重新启动计算机,在开机过程中,点击键盘上的“Delete”键,进入BIOS设置界面,选择“Integrated Peripherals”选项,展开后将“USB 1.1 Controller”和“USB 2.0 Contr01ler”选项的属性设置为“Disableed”,即可禁用USB接口。最后别忘记给BIOS设置上一个密码,这样他人就无法通过修改注册表解“锁”上述设备了。
# b" q4 l( f: l4 z5 s
# j! J& I6 j" ~7 P8 j6 x+ N7 q) P方法二,注册表法(适用于Windows XP/2003) 8 Y. R* r# ]2 r' e, e- o
$ P) C+ A' G% p$ P0 D
利用该方法可以锁定电脑上的USB接口,从而达到禁止他人使用闪盘或移动硬盘等可移动存储设备的目的。 " t4 i2 V' F6 q: V, x
在“运行”对话框中输入“regedit”,回车后,打开注册表编辑器,依次展开如下分支[HKEY_LOCAL_MACHINE\SYSTEM\CurrentCntrolSet\Services\USBSTOR],在右侧的窗格中找到名为“Start”的DWORD值,双击,在弹出的编辑对话框中将其数值数据修改为十六位进制数值“4”。点“确定”按钮并关闭注册表编辑器,重新启动计算机,使设置生效。重启后,当有人将USB存储设备连接到计算机时,虽然USB设备上的指示灯在正常闪烁,但在资源管理器当中就是无法找到其盘符,因此也就无法使用USB设备了。 ! _3 c! v1 c/ R8 \+ r& b2 P
提示:“Start”这个键是USB设备的工作开关,默认设置为“3”表示手动,“2”是表示自动,“4”是表示停用 , Y' K7 j2 s9 T8 J
. P& t8 r$ X" t* h+ E# B
三,注册表限制法: + E, b3 f' o5 k6 K9 g& V
如果电脑已经用过USB存储设备,那么禁止起来就更加方便了,直接使用注册表文件进行导入操作即可。
9 Y1 a0 I& k9 |4 G" Z7 {6 i# a+ d+ U3 _
禁止使用USB存储设备的注册表内容如下: + g6 o) N. r0 U4 j
Windows Registry Editor Version 5.00 6 c5 T1 F1 o8 l( E8 H
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
* @/ F& t5 g% T0 Y# o+ ~"Type"=dword:00000001 / B1 O$ U4 Q. l
"Start"=dword:00000004
/ F4 W% ] U3 K0 M/ n5 B"ErrorControl"=dword:00000001 ; z8 h' d) k( U4 }
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\ 1 K- V. z0 j. D# y- K1 e: y
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\
; w/ z' E% x1 V. Q4 P00,52,00,2e,00,53,00,59,00,53,00,00,00 6 I8 Z$ Q3 ]( E3 q; ?, ]" {
"DisplayName"="USB 大容量存储设备"
, z! r: `" k* A9 }& w[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]
' r2 G' o4 _8 ]/ h# z"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ . S3 v' {7 U$ D4 @9 t. }1 C" b* T" K
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
& i# g# m* Q" y9 d3 I00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
, q& e$ s7 D" J6 ?3 \5 s05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ , p; ^, U2 O2 z# k# D6 b
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
0 a" Y T0 t9 ]+ @. y00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
! w* A6 _9 _, Y: Q; @00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
: l0 E) t& ], o: k5 w9 h# |5 Q8 `我们将上面的代码保存成一个以REG为后缀的文本文件,然后双击该文件导入注册表就完成了禁止该计算机使用USB存储设备的操作。所有用户都无法用USB存储设备了,这点和上面仅仅是根据用户或用户组来限制的方法是不同的,效果更好应用范围更广。
8 W: A6 h& M" K- g d7 `
1 Z* ]0 `1 z" w# z开启USB存储设备使用权限的注册表内容如下:
- x9 v- r( U1 `Windows Registry Editor Version 5.00
. I# d2 F( N, \ v7 ^[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
7 \6 |0 T7 O% ]2 I2 A; g"Type"=dword:00000001
& [ U" u0 {5 I( R1 m2 c1 J"Start"=dword:00000003 0 K1 P7 Z' {; P* r
"ErrorControl"=dword:00000001 ; ^" `0 Q3 T; _ w$ O7 ^
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\ . |; @1 L3 `/ ~/ A1 F
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\ + ~/ `* r) }+ F# x2 V, A
00,52,00,2e,00,53,00,59,00,53,00,00,00 ; a! x/ ~4 O1 z+ k' N X) h, o/ M! M3 F
"DisplayName"="USB 大容量存储设备" - D4 W9 }3 T1 }: L2 v' S% ^ h
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]
1 X4 g$ R- _2 T. f"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
% H+ j9 b1 a4 ]* l" s$ f/ E4 W00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 2 r: C ]3 n( `8 J# P7 s) |6 M
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 9 _; K* J% n" t- V2 x, p0 |
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
" `" o# l$ y, n+ O! I. {20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
! r" o. D# W, d% x00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\ 2 e! n; ?- w* Z8 ~1 J6 J+ ]
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 " W/ m4 F: r/ A |
我们将上面的代码保存成一个以REG为后缀的文本文件,然后双击该文件导入注册表就完成了开启该计算机使用USB存储设备的操作。所有用户都可以使用USB存储设备。 |