Disabling USB Storage Devices

Written by Eric Wyatt (last updated June 10, 2019)

2

Since its introduction, USB has provided an amazing advancement in what we can do with our computers. It allows us to connect devices as varied as keyboards, mice, printers, external storage, and more. Unfortunately, it also provides a way for someone to quickly copy data off your computer. You may find it helpful at times to restrict the ability of USB storage devices from being used with your computer. By editing the Registry Editor, you can turn this functionality on or off as you need it, while still allowing use of your USB keyboard, mouse, and USB printers.

To disable USB storage devices, follow these simple steps:

  1. Press Windows+R. Windows opens the Run window.
  2. Type "regedit" (without quotes) and press Enter. Windows opens the Registry Editor.
  3. In the left-side panel, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbstor. Once you do you will see several options in the right-side panel.
  4. In the right-side panel select the item named "Start" and double-click. This brings up the Edit DWORD (32-bit) Value dialog box. (See Figure 1.)
  5. Figure 1. Edit DWORD (32-bit) Value dialog box.

  6. In the Value data field change the "3" to a "4" (without quotes).
  7. Click on OK to close the dialog box.
  8. Close the Registry Editor app.
  9. Restart your computer for the setting to take effect.

To re-enable the USB ports, repeat the steps above, and at step 5 change the "4" back to a "3" and restart your computer.

By disabling USB storage devices access to your computer, you can help ensure that your information is safer on your computer, and not on your friend's USB device.

 This tip (13641) applies to Windows 10.

Author Bio

Eric Wyatt

Eric Wyatt is a swell guy (or so his friends tell him). He is a formally trained designer and branding expert, bringing a wide range of skills to his Tips.Net articles. ...

MORE FROM ERIC

Listening with One Ear

If you use a single speaker to listen to your computer audio, you may be missing out on some sounds. Two quick changes to ...

Discover More

Change your Computer's Name with PowerShell

Your computer has a name that is separate from your account name. You can use PowerShell to change the name of your computer.

Discover More

Showing File Extensions

All file types have an extension, and Microsoft hides them by default. Learn how to turn file extensions on.

Discover More
More WindowsTips

Understanding Aero Peek

Windows implements a lot of visual effects that can make your screen and desktop look gorgeous. Those effects have a ...

Discover More

What is a Desktop.ini File?

When browsing through your system, you might see several files named Desktop.ini. This tip explains what these files are ...

Discover More

Grouping Tiles on the Start Screen

The Start screen can serve as your launching pad for whatever programs you desire. You can move tiles around on the Start ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is two more than 7?

2019-06-10 09:36:00

Barry

You just create a couple of ".reg" files, one enable USB storage and the other doable it. Either can be imported into the registry by right clicking and choosing "Merge".

The easiest way to create the .reg file is to open regedit and export the relevent key. Make a copy for the disable file and edit the key value (4).


2019-06-10 07:23:27

Len Richards

This is a pain to continually do this and most won't .... if you want to be helpful why not present a .bat script that's password protected to do it .... would you like to use mine if you don't know how ...
password isn't really needed as who is going to be able to figure out what file to use
also if anyone really wants to steal your stuff they will, they could change the settings if they figure out why the can't


Newest Tips