Disabling USB Storage Devices

Written by Eric Wyatt (last updated June 10, 2019)

2

Since its introduction, USB has provided an amazing advancement in what we can do with our computers. It allows us to connect devices as varied as keyboards, mice, printers, external storage, and more. Unfortunately, it also provides a way for someone to quickly copy data off your computer. You may find it helpful at times to restrict the ability of USB storage devices from being used with your computer. By editing the Registry Editor, you can turn this functionality on or off as you need it, while still allowing use of your USB keyboard, mouse, and USB printers.

To disable USB storage devices, follow these simple steps:

  1. Press Windows+R. Windows opens the Run window.
  2. Type "regedit" (without quotes) and press Enter. Windows opens the Registry Editor.
  3. In the left-side panel, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\usbstor. Once you do you will see several options in the right-side panel.
  4. In the right-side panel select the item named "Start" and double-click. This brings up the Edit DWORD (32-bit) Value dialog box. (See Figure 1.)
  5. Figure 1. Edit DWORD (32-bit) Value dialog box.

  6. In the Value data field change the "3" to a "4" (without quotes).
  7. Click on OK to close the dialog box.
  8. Close the Registry Editor app.
  9. Restart your computer for the setting to take effect.

To re-enable the USB ports, repeat the steps above, and at step 5 change the "4" back to a "3" and restart your computer.

By disabling USB storage devices access to your computer, you can help ensure that your information is safer on your computer, and not on your friend's USB device.

 This tip (13641) applies to Windows 10.

Author Bio

Eric Wyatt

Eric Wyatt is a swell guy (or so his friends tell him). He is a formally trained designer and branding expert, bringing a wide range of skills to his Tips.Net articles. ...

MORE FROM ERIC

Change the Default Name for New Folders

By default, when a new folder is created in Windows 10, the folder is titled "New Folder." Using the Registry, you can ...

Discover More

Going InPrivate in Edge Chromium

When web browsing there may be times that you need to keep information private. Microsoft Edge Chromium allows for easy ...

Discover More

Showing File Extensions

All file types have an extension, and Microsoft hides them by default. Learn how to turn file extensions on.

Discover More
More WindowsTips

Using Command Prompt (CMD) to Change Your Computer Name

Computers have names that are used to identify them. Using Command Prompt (CMD) you can change your computer's name.

Discover More

Customizing What Appears on the Right Side of the Start Menu

You're probably used to seeing your Start menu appear a certain way. But is it the most effective display for how you ...

Discover More

Enable or Disable Mouse Hover Window Activation

Windows 10 allows for a window to become active by simply hovering your mouse over it. Discover how to turn this setting ...

Discover More
Comments

If you would like to add an image to your comment (not an avatar, but an image to help in making the point of your comment), include the characters [{fig}] (all 7 characters, in the sequence shown) in your comment text. You’ll be prompted to upload your image when you submit the comment. Maximum image size is 6Mpixels. Images larger than 600px wide or 1000px tall will be reduced. Up to three images may be included in a comment. All images are subject to review. Commenting privileges may be curtailed if inappropriate images are posted.

What is 2 + 8?

2019-06-10 09:36:00

Barry

You just create a couple of ".reg" files, one enable USB storage and the other doable it. Either can be imported into the registry by right clicking and choosing "Merge".

The easiest way to create the .reg file is to open regedit and export the relevent key. Make a copy for the disable file and edit the key value (4).


2019-06-10 07:23:27

Len Richards

This is a pain to continually do this and most won't .... if you want to be helpful why not present a .bat script that's password protected to do it .... would you like to use mine if you don't know how ...
password isn't really needed as who is going to be able to figure out what file to use
also if anyone really wants to steal your stuff they will, they could change the settings if they figure out why the can't


Newest Tips