How to Disable / Restrict Use of USB Storage Devices in Windows?

Many times we want to restrict users from using USB drives in our systems. Suppose you have some important data and a friend comes and takes the data in his USB drive. This tutorial will help you in completely disable the use of USB drives in system.

After applying this tutorial, users will not be able to use USB drives. Windows will not detect it.

The tutorial is divided into 2 parts:

If the USB storage device is not installed in system
If the USB storage device is already installed in system

So lets start this tutorial:

If the USB storage device is not installed in system:

1. Type %windir%\inf in Explorer addressbar or RUN dialog box and press Enter. It'll open "inf" folder.

2. Now look for following 2 files:

usbstor.inf
usbstor.pnf

3. Now you have to change their user permissions setting. Do as following for each file:

Right-click on the file and select "Properties". Goto "Security" tab and select the desired user or group in "Group or user names" list which you want to restrict from using USB drives. Now in "Permissions for Users" list, click on "Deny" checkbox next to "Full control" option and then click on OK.

NOTE: In Windows Vista, you'll have to click on "Edit" button after selecting the user or group in "Group or user names" list and then again select the same user or group in new dialog box. Now you can click on "Deny" checkbox.

4. That's it. Now users will not be able to install any USB storage device in system.

If the USB storage device is already installed in system:

1. Open regedit and goto:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

2. In right-side pane, change value of "Start" to 4

3. Now whenever a user will attach a USB storage device which is already installed in system, Windows will not detect it and it'll not be shown in My Computer.

NOTE: If you want to revert it back to default, then change the value of "Start" to 3

BONUS TIP: If you want to restrict only writing to USB storage devices, then take a look at Point 15 in following tutorial:

All Kinds of Restrictions for Windows 2000, XP, 2003 and Vista

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

Subscribe to RSS Feed | Email Newsletter | More Articles

40 Comments

VG

^^ Open My Computer and right-click on drive and select "Open" or "Explore". Now check whether it opens or not.
karthik

Open My Computer and right-click on drive and select "Open" or "Explore".doesnt work
opening it thru command prompt doesnt work....even in cmd,when i tried 2 open,it shows
access is denied...this usbtor also doesnt work...tel me someother workaround in windows explorer.....
VG

^^ Also open regedit and goto:

HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer

Now in right-side pane, if you find any of following DOWRD value, delete them:

NoViewOnDrive
NoDrives
rajakumar

dd
rajakumar

i have two user in windows xp one user only work the pendrive and other user not access the pen drive
karthik

there was no such words like
NoViewOnDrive
NoDrives
on my registry..
i think this problem may also be due to crash of folder lock6.0.1.
it got crashed once then i uninstalled it...
thereafter i got accessdenied problem..pls help
VG

^^ Yep. It might be because of Folder Lock software. Try to reinstall the software and then uninstall it properly.
karthik

yep..i tried to instal n uninstall folder lock...doesnt work...al removable storage like pendrive,camera,cd drive all r saying same error...access denied...but everything works fine in linux os in the same system
walid khan

i have problem with using folder lock6.pls help me and get back reply me what is the solution for this problem.
arun

I am working as a Post Graduate Teacher in computer science in one of the school in salem. I am in charge of the computer lab. I am doubt. ie. how to restrict the students from changing the pointer of the mouse. Is there any option available in regedit