Many times we want to restrict users from using USB drives in our systems. Suppose you have some important data and a friend comes and takes the data in his USB drive. This tutorial will help you in completely disable the use of USB drives in system.
After applying this tutorial, users will not be able to use USB drives. Windows will not detect it.
The tutorial is divided into 2 parts:
- If the USB storage device is not installed in system
- If the USB storage device is already installed in system
So lets start this tutorial:
If the USB storage device is not installed in system:
1. Type %windir%\inf in Explorer addressbar or RUN dialog box and press Enter. It'll open "inf" folder.
2. Now look for following 2 files:
- usbstor.inf
- usbstor.pnf
3. Now you have to change their user permissions setting. Do as following for each file:
Right-click on the file and select "Properties". Goto "Security" tab and select the desired user or group in "Group or user names" list which you want to restrict from using USB drives. Now in "Permissions for Users" list, click on "Deny" checkbox next to "Full control" option and then click on OK.

NOTE: In Windows Vista, you'll have to click on "Edit" button after selecting the user or group in "Group or user names" list and then again select the same user or group in new dialog box. Now you can click on "Deny" checkbox.
4. That's it. Now users will not be able to install any USB storage device in system.
If the USB storage device is already installed in system:
1. Type regedit in RUN dialog box and press Enter. Now goto:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
2. In right-side pane, change value of "Start" to 4

3. Now whenever a user will attach a USB storage device which is already installed in system, Windows will not detect it and it'll not be shown in My Computer.
NOTE: If you want to revert it back to default, then change the value of "Start" to 3
BONUS TIP: If you want to restrict only writing to USB storage devices, then take a look at Point 21 in following tutorial:
All Kinds of Restrictions for Windows
This article was posted by VG in following section: Troubleshooting, Windows 7, Windows Vista, Windows XP.
If you enjoyed this article, you can subscribe to our RSS feed or free newsletter to get all new articles directly in your Inbox. Also check out our most popular articles and archive to read other interesting articles. If you have some news or tip to share, please send us.
VG
^^ Open My Computer and right-click on drive and select "Open" or "Explore". Now check whether it opens or not.
karthik
Open My Computer and right-click on drive and select "Open" or "Explore".doesnt work
opening it thru command prompt doesnt work....even in cmd,when i tried 2 open,it shows
access is denied...this usbtor also doesnt work...tel me someother workaround in windows explorer.....
VG
^^ Also open regedit and goto:
HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer
Now in right-side pane, if you find any of following DOWRD value, delete them:
NoViewOnDrive
NoDrives
rajakumar
dd
rajakumar
i have two user in windows xp one user only work the pendrive and other user not access the pen drive
karthik
there was no such words like
NoViewOnDrive
NoDrives
on my registry..
i think this problem may also be due to crash of folder lock6.0.1.
it got crashed once then i uninstalled it...
thereafter i got accessdenied problem..pls help
VG
^^ Yep. It might be because of Folder Lock software. Try to reinstall the software and then uninstall it properly.
karthik
yep..i tried to instal n uninstall folder lock...doesnt work...al removable storage like pendrive,camera,cd drive all r saying same error...access denied...but everything works fine in linux os in the same system
walid khan
i have problem with using folder lock6.pls help me and get back reply me what is the solution for this problem.
arun
I am working as a Post Graduate Teacher in computer science in one of the school in salem. I am in charge of the computer lab. I am doubt. ie. how to restrict the students from changing the pointer of the mouse. Is there any option available in regedit