Method 1: Only allow specific USB drives to be used through group policy
In Win7 system, we can accomplish this task through Group Policy. Through settings, you can disable all USB storage devices, and also allow the system to only use specified U disks.
Step 1: Insert your USB flash drive into the Win7 system first, so that the system can use the USB flash drive normally. Then enter the "Control Panel", double-click "Device Manager", expand "Portable Devices" inside, and you can see your USB flash drive inside.
Step 2: Right-click the mouse above to select "Properties", click the "Details" tab in the pop-up "Properties" window, and then select "Hardware ID" in the device "Properties" drop-down box. A string will appear in the "Value" below. This is the hardware ID of your USB flash drive. Copy it and save it.
Step 3: You also need to copy the hardware ID of the "USB Mass Storage Device" in the "Universal Serial Bus Controller", expand the "Universal Serial Bus Controller" list in the "Device Manager", find the "USB Mass Storage Device", click the "Details" tab in its "Properties" window, copy its hardware ID and save it.
Step 4: After finding out the hardware ID of the USB flash drive, you can implement it through group policy. "Start → Run" and enter "gpedit.msc" to open the Group Policy window, expand "Computer Configuration → Administrative Templates → System → Device Installation → Device Installation Restrictions", double-click "Prohibit installation of devices not described by other policy settings" on the right, select "Enabled" in the pop-up window, and then click the "OK" button to set it to ban USB devices not described by the policy.
Method 2: Control the USB interface through relevant software
Search online and download "Dazhi USB Monitoring System", which is a software that professionally manages computer U ports and restricts U disk access to computers. Then select the relevant options that need to be checked according to the actual situation to achieve the disabling operation. At the same time, the Dashi USB monitoring system supports adding a storage device whitelist. For mobile devices in the whitelist, the system will not block them and can be used normally. In this way, administrators can add trusted U disks and mobile hard disks to the whitelist, and other storage devices will not be usable.
Both methods have their own advantages. In comparison, the second method is simpler and more convenient, and is more suitable for information protection in enterprises, schools, etc. However, modifying the group policy may be changed back and out of control, which is more suitable for the use of personal computers, but their ultimate purpose is the same, so which method to choose varies from person to person. I believe these two tricks will be of great help to everyone.
