Vo hieu hoa cac o USB, CD-ROM, Floppy Disk va LS-120 bang Group Policy

Microsoft Group Policy cho phep tao cac file mau Administrative Template (.adm) tuy thich de ap dung cho cac thiet lap registry khong co san trong che do mac dinh. Mau ADM trong bai viet nay cho phep vo hieu hoa bo cai cac thiet bi tren.

Mac dinh, Group Policy khong tao dieu kien de dang de vo hieu hoa cac o co the di chuyen nhu cong USB, o CD-ROM, o mem va o mem cong suat cao LS-120. Tuy nhien, Group Policy co the duoc mo rong de su dung cac tuy chon bang cac mau ADM. Mau ADM trong bai nay cho phep quan tri vien co the vo hieu hoa cac o tren, bao dam rang chung khong the su dung.

Cach thuc tien hanh

Nhap mau quan tri nay vao Group Policy bang mot file .adm.

CLASS MACHINE
CATEGORY !!category
 CATEGORY !!categoryname
  POLICY !!policynameusb
   KEYNAME "SYSTEM\CurrentControlSet\Services\USBSTOR"
   EXPLAIN !!explaintextusb
     PART !!labeltextusb DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 3 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
  POLICY !!policynamecd
   KEYNAME "SYSTEM\CurrentControlSet\Services\Cdrom"
   EXPLAIN !!explaintextcd
     PART !!labeltextcd DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 1 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
  POLICY !!policynameflpy
   KEYNAME "SYSTEM\CurrentControlSet\Services\Flpydisk"
   EXPLAIN !!explaintextflpy
     PART !!labeltextflpy DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 3 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
  POLICY !!policynamels120
   KEYNAME "SYSTEM\CurrentControlSet\Services\Sfloppy"
   EXPLAIN !!explaintextls120
     PART !!labeltextls120 DROPDOWNLIST REQUIRED
 
       VALUENAME "Start"
       ITEMLIST
        NAME !!Disabled VALUE NUMERIC 3 DEFAULT
        NAME !!Enabled VALUE NUMERIC 4
       END ITEMLIST
     END PART
   END POLICY
 END CATEGORY
END CATEGORY
 
[strings]
category="Custom Policy Settings"
categoryname="Restrict Drives"
policynameusb="Disable USB"
policynamecd="Disable CD-ROM"
policynameflpy="Disable Floppy"
policynamels120="Disable High Capacity Floppy"
explaintextusb="Disables the computers USB ports by disabling the usbstor.sys driver"
explaintextcd="Disables the computers CD-ROM Drive by disabling the cdrom.sys driver"
explaintextflpy="Disables the computers Floppy Drive by disabling the flpydisk.sys driver"
explaintextls120="Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver"
labeltextusb="Disable USB Ports"
labeltextcd="Disable CD-ROM Drive"
labeltextflpy="Disable Floppy Drive"
labeltextls120="Disable High Capacity Floppy Drive"
Enabled="Enabled"
Disabled="Disabled"

Mau nay se duoc duy tri hon chinh sach thuc va se tac dong len registry cua cac may khach voi thiet lap cua no. Neu mau nay bi xoa bo khoi Group Policy da ap dung no, registry se thay doi no tro lai nhu cu. Neu ban muon dao nguoc lai cac thiet lap duoc tao ra boi mau nay, cac don gian la dao nguoc cac tuy chon sang re-enable cho cac o.

Ap dung cho cac phien ban duoi day cua Windows

• Microsoft Windows Server 2003, Standard Edition (32-bit x86)
• Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
• Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
• Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems

Theo Microsoft