Cheery
.:МордератоР:. | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору
maninblack
Цитата:| мне нужны именно ети долбанные строчки в реестре, отвечающие за ети функции |
не ругайся.. почему ты решил, что все решается только реестром?
Цитата: If you can disable the "Floppy Disk" driver through a policy, you'll
probably meet management's requirement, though many would see the logic
as flawed. The "Hide these specified drives" user policy is also quite
useful in enforcing this type of limit.
Note that disabling the floppy driver doesn't prevent people from
sticking in ZIP drives, LS-120 drives, CD Writers, USB Storage Keys, Infrared,
USB Wireless LAN adapters, printers, or any other type of removable
storage/transfer mechanism. Hiding drives is somewhat useful for that,
but you'll have to disable the Command Prompt in conjunction with that.
(Any application that doesn't use the standard Windows File Open/Save/Browse
dialogs will still provide access to the removable device.) The floppy
disk driver key is at:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Flpydisk
You can change the "Start" type to one of the following:
0x00 Boot
0x01 System
0x02 Auto load
0x03 Load on demand
0x04 Disabled
You can possibly set up your own ADM template for this, but I'm
speculating it will be possible to add this into the "System Services" list in Group
Policies. Try adding the following into the relevant policy's
GptTmpl.inf file in Sysvol\<domain>\Policies\<UUID>\Machine\Microsoft\Windows
NT\SecEdit:
[Service General Setting]
FlpyDisk,4,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)"
You can get the UUID of the policy by displaying its properties in AD
Users & Computers. The line above should add a "FlpyDisk" entry under System
Services in the group policy you added it to. Open the Group Policy,
change anything (just to notify AD that it has changed) and close it. I've not
tested it, but in theory applying the policy now will disable the floppy
driver.
Just be careful with applying this policy to all computers - limit
"Apply Group Policy" to only a test set of workstations to verify that this
actually works.
|
а вот с офисом - не думаю, что так все просто.
|
