组策略禁用USB、CDROM

    技术2022-05-11  71

    ADM文件内容:

    CLASS MACHINECATEGORY !!category CATEGORY !!categoryname  POLICY !!policynameusb   KEYNAME "SYSTEM/CurrentControlSet/Services/USBSTOR"   EXPLAIN !!explaintextusb     PART !!labeltextusb DROPDOWNLIST REQUIRED        VALUENAME "Start"       ITEMLIST        NAME !!Disabled VALUE NUMERIC 3 DEFAULT        NAME !!Enabled VALUE NUMERIC 4       END ITEMLIST     END PART   END POLICY  POLICY !!policynamecd   KEYNAME "SYSTEM/CurrentControlSet/Services/Cdrom"   EXPLAIN !!explaintextcd     PART !!labeltextcd DROPDOWNLIST REQUIRED        VALUENAME "Start"       ITEMLIST        NAME !!Disabled VALUE NUMERIC 1 DEFAULT        NAME !!Enabled VALUE NUMERIC 4       END ITEMLIST     END PART   END POLICY  POLICY !!policynameflpy   KEYNAME "SYSTEM/CurrentControlSet/Services/Flpydisk"   EXPLAIN !!explaintextflpy     PART !!labeltextflpy DROPDOWNLIST REQUIRED        VALUENAME "Start"       ITEMLIST        NAME !!Disabled VALUE NUMERIC 3 DEFAULT        NAME !!Enabled VALUE NUMERIC 4       END ITEMLIST     END PART   END POLICY  POLICY !!policynamels120   KEYNAME "SYSTEM/CurrentControlSet/Services/Sfloppy"   EXPLAIN !!explaintextls120     PART !!labeltextls120 DROPDOWNLIST REQUIRED        VALUENAME "Start"       ITEMLIST        NAME !!Disabled VALUE NUMERIC 3 DEFAULT        NAME !!Enabled VALUE NUMERIC 4       END ITEMLIST     END PART   END POLICY END CATEGORYEND CATEGORY [strings]category="Custom Policy Settings"categoryname="Restrict Drives"policynameusb="Disable USB Removable Drives"policynamecd="Disable CD-ROM"policynameflpy="Disable Floppy"policynamels120="Disable High Capacity Floppy"explaintextusb="Disables the USB Removable Drives capability by disabling the usbstor.sys driver. /n/nSelect the ENABLED radiobox, then select STOPPED for the usbstore.sys driver status in the drop-down list.  /n/nNote that this will only prevent usage of newly plugged-in USB Removable Drives or Flash Drives, devices that were plugged-in while this option was not configured will continue to function normally. Also, devices that use the same device or hardware ID (for example - 2 identical Flash Disks made by the same manufacturer) will still function if one of them was plugged-in prior to the configuration of this setting. In order to successfully block them you will need to make sure no USB Removable Drive is plugged-in while you set this option. /n/nIn order to re-enable the usage of USB Removable Drives select STARTED for the usbstore.sys driver status in the drop-down list."explaintextcd="Disables the CD-ROM Drive by disabling the cdrom.sys driver. /n/nSelect the ENABLED radiobox, then select STOPPED for the cdrom.sys driver status in the drop-down list. /n/nIn order to re-enable the usage of USB Removable Drives select STARTED for the cdrom.sys driver status in the drop-down list."explaintextflpy="Disables the Floppy Drive by disabling the flpydisk.sys driver. /n/nSelect the ENABLED radiobox, then select STOPPED for the flpydisk.sys driver status in the drop-down list. /n/nIn order to re-enable the usage of USB Removable Drives select STARTED for the flpydisk.sys driver status in the drop-down list."explaintextls120="Disables the High Capacity Floppy Drive by disabling the sfloppy.sys driver. /n/nSelect the ENABLED radiobox, then select STOPPED for the sfloppy.sys driver status in the drop-down list. /n/nIn order to re-enable the usage of USB Removable Drives select STARTED for the sfloppy.sys driver status in the drop-down list."labeltextusb="usbstore.sys driver status"labeltextcd="cdrom.sys driver status"labeltextflpy="flpydisk.sys driver status"labeltextls120="sfloppy.sys driver status"Enabled="Stopped"Disabled="Started" 


    最新回复(0)