我自己定义了一个adm组策略模板,其作用是禁止电脑内的资料向U盘里拷贝,可是将模板添加到”计算机配置“启用后并没有起作用,打开注册表发现StorageDevicePolicies根本没有写入注册表中。代码如下:
CLASS MACHINE
CATEGORY !!category
CATEGORY !!categoryname
POLICY !!policynamewriteprotect
KEYNAME "SYSTEM/CurrentControlSet/Control/StorageDevicePolicies"
EXPLAIN !!explaintextwriteprotect
PART !!labeltextwriteprotect DROPDOWNLIST REQUIRED
VALUENAME "WriteProtect"
ITEMLIST
NAME !!Disabled VALUE NUMERIC 0 DEFAULT
NAME !!Enabled VALUE NUMERIC 1
END ITEMLIST
END PART
END POLICY
END CATEGORY
END CATEGORY
[strings]
category="Custom Policy Settings"
categoryname="Write Protection"
policynamewriteprotect="Write Protect USB Removable Drives"
explaintextwriteprotect="Enforces write protection on all USB Removable Drives. /n/nSelect the ENABLED radiobox, then select ON for the Write Protect USB Removable Drives status in the drop-down list. /n/nIn order to disable write protection on USB Removable Drives select OFF for the Write Protect USB Removable Drives status in the drop-down list."
labeltextwriteprotect="Write Protect USB Removable Drives status"
Enabled="On"
Disabled="Off"
希望各位高手指教。