Win7 pure 32-bit system how to disable usb device in windows domain

1. First open the Active Directory user and computer, then select the OU that needs to disable the USB device, and click the right mouse button to group policy;

2, then create a GPO for USB, and click Edit, Open the Group Policy Editor;

3. Go to the Group Policy Editor and expand “Computer Configuration”, click “--&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& ;;

4, then right-click on the "Add File" dialog box, pop-up "Add files and folders", enter in the "folders" folder "%systemroot%infusbstor.inf" And click OK.

5, in the "Database Security Settings", delete all users, and add "Everyone", remove the default allow & ldquo; read and execute & rdquo;, & ldquo; list folder content ”, "Read”, add reject “full control", then click “apply---determine>;

6, in the "add object" window, default Current settings, if you want to re-edit security permissions, you can click "“Edit Security Settings" to reset and click OK to exit the settings;

7. In addition, repeat steps 4, 5, and 7. Set the "%systemroot%infusbstor.PNF&ldquo", then close the Group Policy Editor and use “gpupdate /force” to force the refresh policy.

ps: The above can only be used for computers that have not used USB. If the computer has used U disk and other devices, you need to modify the registry to achieve the purpose. The specific steps are as follows:

1) First open the “start--run” in the win7 system, enter “ldedit” in the run dialog box, press Enter to open the registry;

2) Then expand and navigate to the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesUsbStor" option in the open registry;

3) Then open the above registry location, we can see the key value of start, you need to modify the key value 4, by default 3 (3 means manual, 2 means automatic, 4 means deactivated), to use Group Policy to deploy.