How to Disable / Restrict Use of USB Storage Devices in Windows?

Many times we want to restrict users from using USB drives in our systems. Suppose you have some important data and a friend comes and takes the data in his USB drive. This tutorial will help you in completely disable the use of USB drives in system.

After applying this tutorial, users will not be able to use USB drives. Windows will not detect it.

The tutorial is divided into 2 parts:

If the USB storage device is not installed in system
If the USB storage device is already installed in system

So lets start this tutorial:

If the USB storage device is not installed in system:

1. Type %windir%\inf in Explorer addressbar or RUN dialog box and press Enter. It'll open "inf" folder.

2. Now look for following 2 files:

usbstor.inf
usbstor.pnf

3. Now you have to change their user permissions setting. Do as following for each file:

Right-click on the file and select "Properties". Goto "Security" tab and select the desired user or group in "Group or user names" list which you want to restrict from using USB drives. Now in "Permissions for Users" list, click on "Deny" checkbox next to "Full control" option and then click on OK.

NOTE: In Windows Vista, you'll have to click on "Edit" button after selecting the user or group in "Group or user names" list and then again select the same user or group in new dialog box. Now you can click on "Deny" checkbox.

4. That's it. Now users will not be able to install any USB storage device in system.

If the USB storage device is already installed in system:

1. Open regedit and goto:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

2. In right-side pane, change value of "Start" to 4

3. Now whenever a user will attach a USB storage device which is already installed in system, Windows will not detect it and it'll not be shown in My Computer.

NOTE: If you want to revert it back to default, then change the value of "Start" to 3

BONUS TIP: If you want to restrict only writing to USB storage devices, then take a look at Point 15 in following tutorial:

All Kinds of Restrictions for Windows 2000, XP, 2003 and Vista

Complete list of AskVG articles

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

Share |

40 Comments

Riza

Nice tip. Thanks, VG.
saurabh gupta

Good 1, Thnx BRO.
goldi

Hi vg i need ur help to repair my creative sbs 580 5.1 speakers. Can u help me????????? My main front & center speaker stopped sounding. would u have idea about circuit
VG

^^ Nope mate. I have no idea about it. I'll advise you to contact some mechanic.
goldi

Ok thanks for reply vg can u give me circuit diagram for it or any link for circuit diagram???????????
VG

^^ Sorry but I don't have any link.
BHARAT

When I insert pen drive in USB Port & access through windows explorer, the following error encounters - "Windows - Write

Protect Error - The disk cannot be written to because it is write protected. Please remove the write protection from the

volume USB Disk in drive \Device\Harddisk1\DR3" Pls help me.
VG

^^ Make sure your pen drive doesnt have any write protection switch. If you find it, unlock the pen drive.

Also try to right-click on pen drive icon in My Computer and click on "Open". Now check whether it opens or you get same error.
BHARAT

I have checked-up my pen drive, it doesn't have any write protection.

When I tried to open through My Computer, it opened for a moment & after that pen drive popped-up automatically & following msg appeared,

Windows - No Disk

There is no disk in the drive. Please insert a disk into drive \Device\Harddisk\DR3.

Cancel / Try Again / Continue

When, I clicked on continue, it again run automatically. & when again I stated to save any document same error.

Pls help me because my other work is stopped due to this.
VG

^^ Try to format the drive by right-clicking on it and select "Format".