Disable USB Storage: Registry, Group Policy, or Software

Print View Mobile View

Earlier I had showed you ways to make USB storage devices read-only to protect others from copying your data. Now if you’d rather completely disable USB storage devices from being detected in Windows, without disabling keyboard, mouse, printer, and other USB devices, this post will help you achieve that.

Disable USB Storage Devices using Group Policy Editor

By default, Group Policy does not provide an option to disable USB removable devices, however, we can add such an option using a custom ADM template. Download disable usb storage Administrative Template, or if you want to create it yourself, head over to Microsoft support.

When you have the ADM template ready, import it to your existing Group Policy Objects:

  1. Open Local Group Policy Editor by typing in gpedit.msc in Windows Run dialog (Win + R key).
  2. In GPE, right-click on Administrative Templates under Computer Configuration and select ‘Add/Remove Templates’.
  3. Click on ‘Add’, and browse to the .adm file and select it.
  4. Close the dialog to import template.
  5. Now navigate to Computer Configuration > Administrative Templates > Classic Administrative Templates (ADM) > Custom Policy Settings > Restrict Drives, and you should be able to see four options:
    • Disable USB Drives
    • Disable CDROM
    • Disable Floppy
    • Disable High Capacity Floppy
  6. Double-click on Disable USB Drives, and in the dialog box, select Enabled radio button.
  7. Then under Options, select ‘Stopped’ from the dropdown option for ‘usbstore.sys drive status’.
  8. Disable USB Storage gpedit.msc

  9. Close and restart your computer to take effect.

Disable USB Storage Devices using Registry Editor

  1. Open Windows Run dialog by pressing Win + R keys together.
  2. Type in regedit and press Enter to open Windows Registry Editor.
  3. Now navigate to the following Registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
  4. In the right pane, double-click on “Start” DWORD value and change its value from 3 to 4. If the dword “Start” doesn’t exist, create it.
  5. Disable USB Storage Registry

  6. Close the registry editor and plug in any USB storage device to check.

Software to Disable USB Storage Devices

Here are some free software that can disable USB storage devices without you having to mess with the Registry or Group Policy.

That’s all!