Disabling USB Storage Devices

Written by Eric Wyatt (last updated June 10, 2019)

2

Since its introduction, USB has provided an amazing advancement in what we can do with our computers. It allows us to connect devices as varied as keyboards, mice, printers, external storage, and more. Unfortunately, it also provides a way for someone to quickly copy data off your computer. You may find it helpful at times to restrict the ability of USB storage devices from being used with your computer. By editing the Registry Editor, you can turn this functionality on or off as you need it, while still allowing use of your USB keyboard, mouse, and USB printers.

To disable USB storage devices, follow these simple steps:

  1. Press Windows+R. Windows opens the Run window.
  2. Type "regedit" (without quotes) and press Enter. Windows opens the Registry Editor.
  3. In the left-side panel, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbstor. Once you do you will see several options in the right-side panel.
  4. In the right-side panel select the item named "Start" and double-click. This brings up the Edit DWORD (32-bit) Value dialog box. (See Figure 1.)

    5. Figure 1. Edit DWORD (32-bit) Value dialog box.

  5. In the Value data field change the "3" to a "4" (without quotes).
  6. Click on OK to close the dialog box.
  7. Close the Registry Editor app.
  8. Restart your computer for the setting to take effect.

To re-enable the USB ports, repeat the steps above, and at step 5 change the "4" back to a "3" and restart your computer.

By disabling USB storage devices access to your computer, you can help ensure that your information is safer on your computer, and not on your friend's USB device.

 This tip (13641) applies to Windows 10.

Author Bio

Eric Wyatt

Eric Wyatt is a swell guy (or so his friends tell him). He is a formally trained designer and branding expert, bringing a wide range of skills to his Tips.Net articles. ...

MORE FROM ERIC

Clearing the Address Resolution Protocol Cache

Corrupt or unwanted Address Resolution Protocol (ARP) cache entries can cause connectivity errors. Here is how to flush ...

Discover More

Counting the Number of Files or Subfolders Using PowerShell

Do you need to determine the number of files or subfolders there are in a folder? You can use PowerShell to quickly count ...

Discover More

Using PowerShell to Find Your Wireless Signal Strength

Wi-Fi signal strength is important for faster, more consistent data transfers. You can use PowerShell to gain a more ...

Discover More
More WindowsTips

Disabling Windows Shake

Windows Aero Shake minimizes open windows with a simple gesture. You can disable this feature using the Registry Editor.

Discover More

Changing Your Sound Theme

Don't like the sounds that Windows has chosen to play when system events occur? Here's how to change the sound theme that ...

Discover More

Making Sure Num Lock is On

The Num Lock key controls how your numeric keypad behaves and, possibly, a few other behaviors. Here's how to adjust ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is eight less than 8?

2019-06-10 09:36:00

Barry

You just create a couple of ".reg" files, one enable USB storage and the other doable it. Either can be imported into the registry by right clicking and choosing "Merge".

The easiest way to create the .reg file is to open regedit and export the relevent key. Make a copy for the disable file and edit the key value (4).

2019-06-10 07:23:27

Len Richards

This is a pain to continually do this and most won't .... if you want to be helpful why not present a .bat script that's password protected to do it .... would you like to use mine if you don't know how ...
password isn't really needed as who is going to be able to figure out what file to use
also if anyone really wants to steal your stuff they will, they could change the settings if they figure out why the can't

Newest Tips
Links and Sharing
OUR COMPANY
OUR PRODUCTS
OUR SITES
 

Copyright © 2025 Sharon Parq Associates, Inc.