資源描述：
《域策略__usb外設禁用》由會員上傳分享，免費在線閱讀，更多相關內(nèi)容在工程資料-天天文庫。
1、有一個usb_stop?adm的策略模板的方法木人在機器上測試通過。以下文字存為usb.adm文件。開始，此線不算CLASSMACHINECATEGORY![categoryCATEGORY!!categorynamePOLICY!!policynameusbKEYNAMEz/SYSTEMCurrentControlSetServicesUSBSTOR/zEXPLAIN!!explaintextusbPART!llabcltcxtusbDROPDOWNLISTREQUIREDVALUENAM
2、E"Start"ITEMLISTNAME!!DisabledVALUENUMERIC3DEFAULTNAME!!EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYPOLICY!!policynamecdKEYNAME〃SYSTEMCur'i'cntContr'olSctScrviccsCdi'onTEXPLAIN!lexplaintextcdPART!!labeltextcdDROPDOWNLISTREQUIREDVALUENAME"Start"I
3、TEMLISTNAME![DisabledVALUENUMERIC1DEFAULTNAME![EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYPOLICY!!policynameflpyKEYNAME，zSYSTEMCurrentControlSetServicesFlpydisk/，EXPLAIN!!explaintextflpyPART!!labeltextflpyDROPDOWNLISTREQUIREDVALUENAME"Start"ITE
4、MLISTNAME![DisabledVALUENUMERIC3DEFAULTNAME!!EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYPOLICY!!policynamelsl20KEYNAME，zSYSTEMCurrentControlSetServicesSfloppyEXPLAIN!!explaintextlsl20PART!!labeltextlsl20DROPDOWNLISTREQUIREDVALUENAME"Start"ITEML
5、ISTNAME![DisabledVALUENUMERIC3DEFAULTNAME![EnabledVALUENUMERIC4ENDITEMLISTENDPARTENDPOLICYENDCATEGORYENDCATEGORY[strings]category二〃CustomPolicySettings"categoryname二〃RestrictDrives'7policynameusb=z/DisableUSB"po1icynamccd=z，DisableCD-ROM"policynameflp
6、y=，/DisableFloppy"policynamelsl20=/zDisableHighCapacityFloppy"explaintextusb二〃DisablesthecomputersUSBportsbydisablingtheusbstor.sysdriver"explaintexted二〃DisablesthecomputersCD-ROMDrivebydisablingtheedrom?sysdriver"explaintextflpy=/zDisablesthecomputer
7、sFloppyDrivebydisablingtheflpydisk.sysdriver'7explaintextlsl20=z，DisablesthecomputersHighCapacityFloppyDrivebydisablingthesfloppy.sysdriver'7labeltextusb=，/DisableUSBPorts"labeltextcd=/zDisableCD-ROMDrive"labeltextflpy=，zDisableFloppyDrive"labeltextls
8、l20=z，DisableHighCapacityFloppyDrive"Enab1ed=/zEnab1cd〃Disabled二〃Disabled"結(jié)朿，此線不算第一步：我們我們在域控制器上點擊開始一運行輸入“GPMC.MSC”一點擊確定啟動組策略管理。運行囚需號驚;耀跖罷更Internet資源的名打開(Q):第二步：打開組策略管理，右鍵點擊zhp.com-點擊“創(chuàng)建并鏈接(GP0)”一輸入組策略名稱“禁止USB”o因為我們這次的策略是希望企業(yè)內(nèi)所冇計算機都應用，故我們在域級別上創(chuàng)
