If you want to block the access to USB storage devices in Windows, continue reading this tutorial. As you may know, one of the most efficient ways to backup your data, or to transfer data between two different computers, is by using a USB storage device. However, the ability to use a USB storage device carries the risk of copying your sensitive data by a third party person without your permission or the risk of infecting your computer if the USB storage device is infected.
This guide contains step-by-step instructions on how to disable (block) the USB storage devices (e.g. USB flash drives, USB external hard drives, Smartphones, Tablets, etc.), in Windows 10, 8, 7 OS and in Windows Server 2008, 2012/2016 (Standalone versions). *
* Note: After applying the steps below to your computer, whenever you connect a USB storage device, you will receive one of the following error messages when trying to access it.
- Related Article: How to Block USB Storage Devices on a Domain with Group Policy.
How to Block Access to USB Drives in Windows (All Versions).
- Method 1. Block USB Storage Access using Registry.
- Method 2. Block USB Storage Access with Group Group Policy Editor.
Method 1. How to Disable USB Storage Access using Registry.
* Notes:
1. This method applies to all Windows Operating Systems.
2. Remove all connected USB drives before applying the restriction, because the restriction doesn't apply to already inserted USB storages devices.
1. Open the registry Editor. To do that:
a. Simultaneously press the Windows
+ R keys to open run command box.
b. Type regedit and press Enter.
2. Navigate to the following key at the left pane:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
3. At the right pane, open the Start value and change the value from 3 to 4 and click OK. *
* Note: If you want to re-enable the USB Storage access, switch this value data back to 3.
5. Close the Registry Editor and restart the computer.
Method 2. How to Disable USB Storage Access with Group Policy Editor.
To prevent the access to all Removable Storage Devices in Windows using Policy: *
* Notes:
1. This method works only in Windows Professional versions and in Windows Server versions.
2. Remove all connected USB drives before applying the restriction, because the restriction doesn't apply to already inserted USB storages devices.
1. Open Group Policy Editor. To do that:
a. Press simultaneously the Windows
+ R keys to open the run command box.
b. Type gpedit.msc & Press Enter.
2. In Local Group Policy Editor, navigate to:
- Computer Configuration > Administrative Templates > System > Removable Storage Access
3. Open the All Removable Storage classes: Deny all access policy. *
* Note: If you want to block only the write access to USB, select the Removable Disks: Deny write access.
4. Select Enabled and click OK.
5. Close the Local Group Policy Editor and restart the computer.
That's it! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.