Many times we want to restrict users from using USB drives in our systems. Suppose you have some important data and a friend comes and takes the data in his USB drive. This tutorial will help you in completely disable the use of USB drives in system.
After applying this tutorial, users will not be able to use USB drives. Windows will not detect it.
The tutorial is divided into 2 parts:
- If the USB storage device is not installed in system
- If the USB storage device is already installed in system
So lets start this tutorial:
If the USB storage device is not installed in system:
1. Type %windir%\inf in Explorer addressbar or RUN dialog box and press Enter. It'll open "inf" folder.
2. Now look for following 2 files:
- usbstor.inf
- usbstor.pnf
3. Now you have to change their user permissions setting. Do as following for each file:
Right-click on the file and select "Properties". Goto "Security" tab and select the desired user or group in "Group or user names" list which you want to restrict from using USB drives. Now in "Permissions for Users" list, click on "Deny" checkbox next to "Full control" option and then click on OK.
NOTE: In Windows Vista, you'll have to click on "Edit" button after selecting the user or group in "Group or user names" list and then again select the same user or group in new dialog box. Now you can click on "Deny" checkbox.
4. That's it. Now users will not be able to install any USB storage device in system.
If the USB storage device is already installed in system:
1. Open regedit and goto:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
2. In right-side pane, change value of "Start" to 4
3. Now whenever a user will attach a USB storage device which is already installed in system, Windows will not detect it and it'll not be shown in My Computer.
NOTE: If you want to revert it back to default, then change the value of "Start" to 3
BONUS TIP: If you want to restrict only writing to USB storage devices, then take a look at Point 15 in following tutorial:
All Kinds of Restrictions for Windows 2000, XP, 2003 and Vista
This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.
Subscribe to RSS Feed |
Email Newsletter |
More Articles
Related Articles
Popular Articles
- Frequently Asked Problems with Solutions
- Is Your System Infected with a Virus / Spyware / Adware / Trojan?
- Transform Windows Vista into 7 without using Customization pack
- Transform Windows XP into 7 without using Customization pack
- Transform Windows XP into Vista without using Customization pack
- All About Resource Hacker in a brief Tutorial
- Master Tutorial to Make Your Windows 7 Super Fast
- Master Tutorial to Make Your Windows Vista Super Fast
- Master Tutorial to Make Your Windows XP Super Fast
- All Kinds of Restrictions for Windows XP, Vista and 7
Carlos
When I click Properties doesn't appear the Security tab ?!
It appears the General and Summary Tab.
Why?
I hope your answer soon.
VG
^^ Disable "Use Simple File Sharing" option in Tools -> Folder Options.
BHARAT
how to delete icons visible under following path.
During office hours, I normally run my programmes (exe files, etc) from my USB drive. These programmes are portable, no one knows about it & I don't want them to aware so pls help me.
the path is
"startmenu/settings/taskbar/customize/customize notifications"
VG
^^ You can disable "hide inactive icons" option in Taskbar Properties.
Eu
como???
Baldev Verma
I have checked-up my pen drive, it doesn’t have any write protection.
When I tried to open through My Computer, it opened for a moment & after that pen drive popped-up automatically & following msg appeared,
Windows - No Disk
There is no disk in the drive. Please insert a disk into drive \Device\Harddisk\DR3.
Cancel / Try Again / Continue
When, I clicked on continue, it again run automatically. & when again I stated to save any document same error.
Pls help me because my other work is stopped due to this.
VG
^^ Try to format the pen drive.
Mitch
I've been trying to unwrite-protect the USBSTOR.INF and .PNF files but it won't budge, even if I tried to disable the "Use Simple File Sharing" in the Folder Options as posted above. Please advise.
karthik
hi vg,whenever i insert any pendrive or any removable storage,its getting detected,drivers working fine,i can view free space...but cant open it..explorer says
I:\ is not accessible.
access is denied
the pendrives r al working fine in others computers..
i tried the steps u mentioned above,it didnt work.still access is denied
however ,i can read contents of my phone(connected thru usb) through nokia pc suite,but not thru win explorer..this shows theres some security prob wit win explorer...but i dono hw to solve it..pls help.
karthik
i feel that the above problem may also be due to installation and uninstallation of folder lock..i didnt use the prog at all..but i hav a doubt in it..pls help soon