Under normal circumstances, when users restrict the use of USB devices, the first thing they consider is to prohibit their automatic playback to avoid Trojan horse virus invasion. However, in many cases, this method is not very effective. If you are a Win7 user, you can control the automatic operation of USB devices from the source through its unique "permission control" technology.
As we all know, when a USB device is plugged into the computer host, the system will prompt that the device is ready for use. This process is actually the process of the system identifying and installing the driver for the USB device. Therefore, we can use the unique permission control function of Win7 to prohibit it from automatically identifying and installing drivers, so as to achieve the purpose of controlling the source.
First enter the "X:Windowsinf" directory (X: is the partition drive letter where Win7 is located), find the two files "usbport.PNF" and "usbstor.PNF" respectively, and then add the corresponding "group Or user” attribute security permission is set to “Deny”.
Take setting "usbport.PNF" as an example:
Right-click the "usbport.PNF" file, switch to the "Security" tab in the pop-up dialog box, click the "Edit" button, and then set the "Full Control" permissions for the system default group or user "SYSTEM" Just click "Reject".
Tip: Although this method can control the self-installation of USB devices from the source, when you plug the device into the computer host, the system will "pretend to be deaf" and will not respond to your insertion. Therefore, Master Dong suggested that you can upgrade the permissions for your commonly used users so that they can obtain "Full Control" permissions, while changing the permissions for ordinary users to deny, so as to achieve a flexible effect.