Disabling USB Storage Devices

Written by Eric Wyatt (last updated June 10, 2019)

2

Since its introduction, USB has provided an amazing advancement in what we can do with our computers. It allows us to connect devices as varied as keyboards, mice, printers, external storage, and more. Unfortunately, it also provides a way for someone to quickly copy data off your computer. You may find it helpful at times to restrict the ability of USB storage devices from being used with your computer. By editing the Registry Editor, you can turn this functionality on or off as you need it, while still allowing use of your USB keyboard, mouse, and USB printers.

To disable USB storage devices, follow these simple steps:

  1. Press Windows+R. Windows opens the Run window.
  2. Type "regedit" (without quotes) and press Enter. Windows opens the Registry Editor.
  3. In the left-side panel, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbstor. Once you do you will see several options in the right-side panel.
  4. In the right-side panel select the item named "Start" and double-click. This brings up the Edit DWORD (32-bit) Value dialog box. (See Figure 1.)
  5. Figure 1. Edit DWORD (32-bit) Value dialog box.

  6. In the Value data field change the "3" to a "4" (without quotes).
  7. Click on OK to close the dialog box.
  8. Close the Registry Editor app.
  9. Restart your computer for the setting to take effect.

To re-enable the USB ports, repeat the steps above, and at step 5 change the "4" back to a "3" and restart your computer.

By disabling USB storage devices access to your computer, you can help ensure that your information is safer on your computer, and not on your friend's USB device.

 This tip (13641) applies to Windows 10.

Author Bio

Eric Wyatt

Eric Wyatt is a swell guy (or so his friends tell him). He is a formally trained designer and branding expert, bringing a wide range of skills to his Tips.Net articles. ...

MORE FROM ERIC

Illegal Windows Names

When it comes to files and folders and naming them in there are restrictions. Knowing what is restricted will help you ...

Discover More

Change your Computer's Name with PowerShell

Your computer has a name that is separate from your account name. You can use PowerShell to change the name of your computer.

Discover More

Checking for Compromised Passwords with Edge Chromium

Compromised passwords can put your information at risk. Check for compromised passwords with Edge Chromium.

Discover More
More WindowsTips

Setting an Account to Automatically Logon

Passwords are a great way to protect the content on our computers. What if you want to login to your system without using ...

Discover More

Changing Time Settings

As you no doubt know, Windows has a built-in clock that is used for a variety of purposes. This tip covers the various ...

Discover More

Improve Performance by Turning Off 3D Effects

Windows does a lot of nuancing to provide the user with a pleasing visual experience. All this attention to detail, ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is seven more than 3?

2019-06-10 09:36:00

Barry

You just create a couple of ".reg" files, one enable USB storage and the other doable it. Either can be imported into the registry by right clicking and choosing "Merge".

The easiest way to create the .reg file is to open regedit and export the relevent key. Make a copy for the disable file and edit the key value (4).


2019-06-10 07:23:27

Len Richards

This is a pain to continually do this and most won't .... if you want to be helpful why not present a .bat script that's password protected to do it .... would you like to use mine if you don't know how ...
password isn't really needed as who is going to be able to figure out what file to use
also if anyone really wants to steal your stuff they will, they could change the settings if they figure out why the can't


Newest Tips