USB注册表限制法
: }3 c" b- x, B5 ], v问题:如何解决USB设备被禁止
7 ?9 ^ M' J* H1 q' U2 G" o. t' }回答: & u: `+ \4 G3 @2 D9 L/ E
方法一,BIOS设置法
- c9 i) b4 h2 l) w; k( @& b, [2 C5 v0 c( s5 j
重新启动计算机,在开机过程中,点击键盘上的“Delete”键,进入BIOS设置界面,选择“Integrated Peripherals”选项,展开后将“USB 1.1 Controller”和“USB 2.0 Contr01ler”选项的属性设置为“Disableed”,即可禁用USB接口。最后别忘记给BIOS设置上一个密码,这样他人就无法通过修改注册表解“锁”上述设备了。 1 t3 g: s( t8 z
, Y+ U9 s: }1 h7 N5 u+ }方法二,注册表法(适用于Windows XP/2003) % f; d9 }5 @+ t& v/ Z$ P
( L# Q4 @+ K9 @7 ~' \; S' G5 ^
利用该方法可以锁定电脑上的USB接口,从而达到禁止他人使用闪盘或移动硬盘等可移动存储设备的目的。
) X; G1 Y3 L" g! A. H- A在“运行”对话框中输入“regedit”,回车后,打开注册表编辑器,依次展开如下分支[HKEY_LOCAL_MACHINE\SYSTEM\CurrentCntrolSet\Services\USBSTOR],在右侧的窗格中找到名为“Start”的DWORD值,双击,在弹出的编辑对话框中将其数值数据修改为十六位进制数值“4”。点“确定”按钮并关闭注册表编辑器,重新启动计算机,使设置生效。重启后,当有人将USB存储设备连接到计算机时,虽然USB设备上的指示灯在正常闪烁,但在资源管理器当中就是无法找到其盘符,因此也就无法使用USB设备了。
! X5 ?* t0 D+ X1 {* d" v提示:“Start”这个键是USB设备的工作开关,默认设置为“3”表示手动,“2”是表示自动,“4”是表示停用
" }; c; M u- {' V: X! h/ b, }* v0 v
4 y0 U/ i% }7 K' x. a/ V三,注册表限制法:
% K( A1 c1 i% r7 ?/ ^/ v- I7 r如果电脑已经用过USB存储设备,那么禁止起来就更加方便了,直接使用注册表文件进行导入操作即可。 ! ^. }/ l5 M A. F) O- d
' N7 \1 G2 C( X+ a+ e1 C, n0 w, M
禁止使用USB存储设备的注册表内容如下:
8 M* ?4 o' o8 j6 K! T7 n* a0 OWindows Registry Editor Version 5.00 3 M) P' m2 w' U- m. [9 Q6 Y
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR] 2 ?( ?* i( G% w2 y- u9 Y" `3 t
"Type"=dword:00000001
" j9 y) w' }+ i6 |# L"Start"=dword:00000004 ; V! _+ x: L7 A6 Y& G1 t5 d
"ErrorControl"=dword:00000001 : A6 t. }# _0 e. Q8 @6 u' g
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\ 4 j& D: B9 u" J* k9 ?! d" m! V/ D+ T
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\ 3 ]* W$ Q; U- y7 u
00,52,00,2e,00,53,00,59,00,53,00,00,00
& i6 x, T7 g; X% O* o A2 R) ["DisplayName"="USB 大容量存储设备" 7 N2 e; ^! @6 t- P1 ^7 G
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]
& `( E' e7 K% `, g' W) y5 b"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ 6 A w1 B. q; N% `. {' A5 Z, v* m
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
$ q. b7 v B6 K8 c0 b; `8 ^- z) _4 x00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
3 m5 A& V; t+ z) O6 n0 D# L. b05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 6 I1 d# n% E8 K7 i, ?
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ , x. _( P" E+ W5 S$ L# f# c4 B
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
1 q0 R9 Z8 X0 d; e! h& k+ d00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
2 L, g9 |$ a- f0 T1 r! e; v9 B我们将上面的代码保存成一个以REG为后缀的文本文件,然后双击该文件导入注册表就完成了禁止该计算机使用USB存储设备的操作。所有用户都无法用USB存储设备了,这点和上面仅仅是根据用户或用户组来限制的方法是不同的,效果更好应用范围更广。 0 M1 J6 p7 x6 c7 n
+ ~, |( T* A5 p2 F' t开启USB存储设备使用权限的注册表内容如下:
0 [+ F$ o. F' K8 `Windows Registry Editor Version 5.00 9 J2 p% T! W. v6 ]3 ~7 O
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
! |6 _7 F2 m$ Y& a; Z5 Z"Type"=dword:00000001 4 d$ B4 K1 o; y, X5 [( ?
"Start"=dword:00000003
: ?' W* S3 y, ^! t"ErrorControl"=dword:00000001
% |* _& q, {% Y6 s+ X0 C* O"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\ " c6 J5 W& g4 r+ ?3 Z
52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\
/ k) L) j' y, ]% l; Z00,52,00,2e,00,53,00,59,00,53,00,00,00
. ]: `, f w3 ~- |' i2 W"DisplayName"="USB 大容量存储设备" - r% ]+ W% i, l
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security] 6 f: A+ |4 D- @7 w
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
/ V. y% r: ?% X3 @. G" B00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
9 T8 V% [% V% o8 X) t! b3 u+ q2 y00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
/ o1 A) R+ M$ ^0 ^) z! ^& B# t& P05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
/ u4 `) u5 t, [" o" _3 ~( k20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ 0 H0 Q- U8 ~6 r6 Y& c
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
) z% Y0 |- D, W. g9 q00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 " j' Q/ V& y9 C, Z. i
我们将上面的代码保存成一个以REG为后缀的文本文件,然后双击该文件导入注册表就完成了开启该计算机使用USB存储设备的操作。所有用户都可以使用USB存储设备。 |