批处理禁用U盘,光驱,用户添加到组,盘符添加权限

本文出自 “网增科技有限公司”官网,复制转载必务必保留此出处http://www.wzkji.com/news/nws_dtl.asp?nid=10008148 

@echo off

::判断本用户是否使用过本程序
@if not exist \\bdcserver\Software\15.常用小工具\记录\%USERNAME%.txt  goto go
@if exist \\bdcserver\Software\15.常用小工具\记录\%USERNAME%.txt&& goto exit

:go
::添加登陆账户到Users组,删除Users组中其它用户,从administrators中删除登陆用户!
@net localgroup administrators domain\%USERNAME%  /add
@net localgroup users domain\%USERNAME%  /add
@net localgroup users "nt authority\authenticated users"  /del
@net localgroup users "nt authority\interactive"  /del
::禁用U盘默认3,光驱默认为1
@reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR" /v Start /t reg_dword /d 4 /f
@reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\" /v Start /t reg_dword /d 4 /f
::修改盘符权限为登陆用户完全控制
@echo %username%
@echo y | cacls c:\ /t /c /e /g "%USERNAME%":F
@echo y | cacls d:\ /t /c /e /g "%USERNAME%":F
@echo y | cacls e:\ /t /c /e /g "%USERNAME%":F
@echo y | cacls f:\ /t /c /e /g "%USERNAME%":F

@echo %username% >>\\bdcserver\Software\15.常用小工具\记录\%username%.txt
::刷新桌面,使设置生效
@taskkill /f /im explorer.exe && start explorer.exe

:exit

本文出自 “网增科技有限公司”官网,复制转载必务必保留此出处http://www.wzkji.com/news/nws_dtl.asp?nid=10008148