How to Disable / Restrict Use of USB Storage Devices in Windows?

Many times we want to restrict users from using USB drives in our systems. Suppose you have some important data and a friend comes and takes the data in his USB drive. This tutorial will help you in completely disable the use of USB drives in system.

After applying this tutorial, users will not be able to use USB drives. Windows will not detect it.

The tutorial is divided into 2 parts:

If the USB storage device is not installed in system
If the USB storage device is already installed in system

So lets start this tutorial:

If the USB storage device is not installed in system:

1. Type %windir%\inf in Explorer addressbar or RUN dialog box and press Enter. It'll open "inf" folder.

2. Now look for following 2 files:

usbstor.inf
usbstor.pnf

3. Now you have to change their user permissions setting. Do as following for each file:

Right-click on the file and select "Properties". Goto "Security" tab and select the desired user or group in "Group or user names" list which you want to restrict from using USB drives. Now in "Permissions for Users" list, click on "Deny" checkbox next to "Full control" option and then click on OK.

NOTE: In Windows Vista, you'll have to click on "Edit" button after selecting the user or group in "Group or user names" list and then again select the same user or group in new dialog box. Now you can click on "Deny" checkbox.

4. That's it. Now users will not be able to install any USB storage device in system.

If the USB storage device is already installed in system:

1. Open regedit and goto:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

2. In right-side pane, change value of "Start" to 4

3. Now whenever a user will attach a USB storage device which is already installed in system, Windows will not detect it and it'll not be shown in My Computer.

NOTE: If you want to revert it back to default, then change the value of "Start" to 3

BONUS TIP: If you want to restrict only writing to USB storage devices, then take a look at Point 15 in following tutorial:

All Kinds of Restrictions for Windows 2000, XP, 2003 and Vista

Complete list of AskVG articles

This article was posted in Security Zone, Troubleshooting, Windows 7, Windows Vista, Windows XP.

Share |

40 Comments

VG

^^ Simply disable the Mouse applet using following tutorial:

http://www.askvg.com/how-to-hide-show-specific-control-panel-applets-icons-in-windows/
arun

I have tried it but i could not able to hide the options. Please help me sir
kk

hi,i tried to change perms. for usbstor.inf and .pnf files.....bt on right clicking the file ,in properties window m not gettin the security option from where i cn change it...pls help.
VG

^^ Disable "Simple File Sharing" option in "Folder Options".
Bala Bhuma

Hi, How to restrict users from downloading through Firefox ?
srj

hi vg... there is a problem with my sytem.. when ever i turn on the power supply through ups the cpu turns on without even pressing the power button.... can you please help me... i really need your help... it keeps on asking me to change cmos error... i dont know what to do i even updated the bios version but still the problem contunies.....
VG

^^ If you get CMOS checksum error, you need to change CMOS battery attached in your motherboard. Its a small coin-sized battery which costs 15-20 bucks approx.
yogibear04

well vg i like your tweaks as much as i love my bracelet that i never ever take off but this one is just not that useful im sorry but im gonna have to say i dont like it but that doesnt mean everyone else doesnt like it im sure a bunch of other people like it im just sayying i dont see the use for it
wasim

Sir i want such a configuration in which i restrict copy the data from usb to computer and allow copy the data from computer to usb in windows XP.
avishek

hi vg!
actually i want to configure my system ,so that no one can attach any pen drive or any removable media whereas usb keyboard or ubs mouse must be worked properly
now what should i do??
ur reply will be appreciated !