USB屏蔽技术二

一.BIOS设置

重新启动计算机,在启动过程中按键盘上的Delete键，进入BOIS设置界面，选择“Integrated Peripherals”(集成设备)选项，展开后将“USB 1.1 Controller”(USB1.1控制器)和“USB 2.0 Controller”（USB2.0控制器）选项的属性设置为“Disabled”(禁用)。再给BOIS设置上一个密码，这样他人就不能轻易修改BOIS设置了。.{ m-mI*P!A?T+H J

缺点：当你想再用USB设备就比较麻烦

二.注册表法
禁止使用USB存储设备的注册表内容如下：
    Windows Registry Editor Version 5.00M Q d };mf!v |

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
"Type"=dword:00000001
"Start"=dword:00000004/o&r0TB4v
"ErrorControl"=dword:000000015Ls6T _ `Qy/Ld
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\JIr@/J.G4U
  00,52,00,2e,00,53,00,59,00,53,00,00,00
"DisplayName"="USB 大容量存储设备"G(Y/xl!oW

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\!EF2X+D+v
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\7V)pc)nw~
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\_.s4E0?sMZ[@
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00
}a:`q%L0b}
    在记事本把上面的代码保存成一个名为lockusb.reg的reg文件，然后双击该文件导入注册表就完成了禁止该计算机使用USB存储设备的操作。所有用户都无法用USB存储设备了。
(a(F3TD#F3si b
    开启USB存储设备使用权限的注册表内容如下：,ut fA(tX_ MI
    Windows Registry Editor Version 5.00
}Z"sz aZ7K `T
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR] N7L4W"Y"Ts!f
"Type"=dword:00000001
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\
  52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\
  00,52,00,2e,00,53,00,59,00,53,00,00,00
"DisplayName"="USB 大容量存储设备"
0p1],m U { C’C$t
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]/o%M"\5Pf |
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
  00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\?1bjn6vT7mK
  00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\:C"IL9]K;s)}
  05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
  20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ZP0}z4}
G n ak
  00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
  00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00%t r Ifp4n(nB$}(bv4?

    上面的代码保存成一个以unlockusb.reg后缀的reg文件，双击该文件导入注册表就完成了开启该计算机使用USB存储设备的操作。所有用户都可以使用USB存储设备。
优点：使用方便
缺点：不能防止别人用解锁代码改回注册表，如果需要更安全的性能，可考虑禁用注册表。这里不在讨论。
Wkj y `&wc:?
三.软件法
   USB加锁王可以实现这一功能，从驱动级对计算机的USB设备进行控制，安全级别高，可靠性高。
不过这个软件不是免费滴。Y S+l F5}M jR
MEbLV N
四.终结者（必杀技）#Ae8z$Z+g
[ u
   把主板上的USB接口撬下来就可以了，呵呵，:lol @Gu#D4p/v4j.N
Z"iV)i,q$a&a;a
推荐使用注册表法