Disabling USB Storage Devices

Written by Eric Wyatt (last updated June 10, 2019)

2

Since its introduction, USB has provided an amazing advancement in what we can do with our computers. It allows us to connect devices as varied as keyboards, mice, printers, external storage, and more. Unfortunately, it also provides a way for someone to quickly copy data off your computer. You may find it helpful at times to restrict the ability of USB storage devices from being used with your computer. By editing the Registry Editor, you can turn this functionality on or off as you need it, while still allowing use of your USB keyboard, mouse, and USB printers.

To disable USB storage devices, follow these simple steps:

  1. Press Windows+R. Windows opens the Run window.
  2. Type "regedit" (without quotes) and press Enter. Windows opens the Registry Editor.
  3. In the left-side panel, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbstor. Once you do you will see several options in the right-side panel.
  4. In the right-side panel select the item named "Start" and double-click. This brings up the Edit DWORD (32-bit) Value dialog box. (See Figure 1.)
  5. Figure 1. Edit DWORD (32-bit) Value dialog box.

  6. In the Value data field change the "3" to a "4" (without quotes).
  7. Click on OK to close the dialog box.
  8. Close the Registry Editor app.
  9. Restart your computer for the setting to take effect.

To re-enable the USB ports, repeat the steps above, and at step 5 change the "4" back to a "3" and restart your computer.

By disabling USB storage devices access to your computer, you can help ensure that your information is safer on your computer, and not on your friend's USB device.

 This tip (13641) applies to Windows 10.

Author Bio

Eric Wyatt

Eric Wyatt is a swell guy (or so his friends tell him). He is a formally trained designer and branding expert, bringing a wide range of skills to his Tips.Net articles. ...

MORE FROM ERIC

Clearing the Address Resolution Protocol Cache

Corrupt or unwanted Address Resolution Protocol (ARP) cache entries can cause connectivity errors. Here is how to flush ...

Discover More

Five Windows 10 Services that are Safe to Disable

Windows 10 is built using services that perform tasks. In this tip you'll discover five services that you can disable safely.

Discover More

Limiting Bandwidth for Updates

Use a new advanced feature in Settings to limit upload bandwidth usage. By setting the absolute bandwidth an update can ...

Discover More
More WindowsTips

Using Random Hardware Addresses

Random Hardware Addresses helps hide your computer from others tracking you on a Wi-Fi network. Turn Random Hardware ...

Discover More

Clean Boot Windows 10

When your computer is not running the way it should, you can try a clean boot. A clean boot in Windows 10 provides more ...

Discover More

Adjusting the Taskbar for Multiple Displays

When you have multiple displays attached to your computer you might want to change how the Taskbar looks on your extra ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is three less than 4?

2019-06-10 09:36:00

Barry

You just create a couple of ".reg" files, one enable USB storage and the other doable it. Either can be imported into the registry by right clicking and choosing "Merge".

The easiest way to create the .reg file is to open regedit and export the relevent key. Make a copy for the disable file and edit the key value (4).


2019-06-10 07:23:27

Len Richards

This is a pain to continually do this and most won't .... if you want to be helpful why not present a .bat script that's password protected to do it .... would you like to use mine if you don't know how ...
password isn't really needed as who is going to be able to figure out what file to use
also if anyone really wants to steal your stuff they will, they could change the settings if they figure out why the can't


Newest Tips