How to Disable USB Drives in Windows 10 and Windows 11

As USB drives are a popular way to transfer data between devices, they can also pose a security risk for organizations. To minimize the risk of data breaches or malware infections, it is important to disable USB drives on Windows 10 devices in certain situations. In this article, we will provide a step-by-step guide on how to disable USB drives in Windows 10 and 11.

Disable USB drives by Registry Editor

Registry Editor is a powerful tool that allows you to manage settings and configurations in Windows. You can use Registry Editor to disable USB ports to prevent any unauthorized use of external devices. Here’s how to do it:

Step 1: Open the Windows 10 Registry Editor

The first step is to open the Windows 10/11 Registry Editor. To do so, press the Windows key + R on your keyboard to open the Run dialog box. Then type in “regedit” and hit Enter. This will open the Registry Editor.

Step 2: Navigate to the USB Storage Driver Key

Next, navigate to the USB storage driver key by following this path:

 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

Step 3: Disable USB Storage Driver

Once you have reached the USB storage driver key, locate the Start DWORD value and double-click on it. This will open a window where you can edit the value data. Change the value data from 3 (which means enabled) to 4 (which means disabled). Then click OK to save the changes.

Step 4: Restart the Computer

After disabling the USB storage driver, you need to restart the computer for the changes to take effect.

Step 5: Verify that USB Drives are Disabled

Once the computer has restarted, plug in a USB drive to verify that it is disabled. If it is disabled, you will not be able to access the contents of the USB drive.

Step 6: Enable USB Drives

If you need to enable USB drives again in the future, simply go back to the Registry Editor and change the value data of the Start DWORD value back to 3 (enabled).

Disable USB Ports by Device Manager

Device Manager is a built-in Windows tool that allows you to manage hardware devices installed on your computer. You can use Device Manager to disable USB ports to prevent any unauthorized use of external devices. Here’s how to do it:

Step 1: Open the Device Manager

To open the Device Manager, right-click on the Start button and select “Device Manager” from the menu.

Step 2: Locate the USB Ports

In the Device Manager window, click on the arrow next to “Universal Serial Bus controllers” to expand the list. This will show you all the USB ports on your computer.

Step 3: Disable the USB Ports

To disable a USB port, right-click on it and select “Disable device” from the context menu. This will prevent the USB port from functioning and any devices connected to it will not work.

Step 4: Confirm the Disable Action

A warning message will appear asking you to confirm that you want to disable the USB port. Click “Yes” to continue.

Step 5: Repeat for Other USB Ports

Repeat steps 3 and 4 for any other USB ports that you want to disable.

Step 6: Enable USB Ports

To enable the USB ports again, simply repeat steps 1 to 4, but this time select “Enable device” from the context menu.

Disable USB Drives Through Group Policy Editor

Group Policy Editor is a powerful tool that allows you to manage a wide range of settings in Windows. You can use it to control which users can access USB drives, as well as other devices, on your network. In this article, we’ll walk you through the steps to disable USB drives through Group Policy Editor.

Step 1: Open Group Policy Editor

The first step is to open Group Policy Editor. You can do this by pressing the Windows key + R on your keyboard and typing “gpedit.msc” in the Run dialog box. Press Enter to open Group Policy Editor.

Step 2: Navigate to the USB Access Policy

Once you have Group Policy Editor open, navigate to the USB Access Policy. You can find this policy by going to Computer Configuration > Administrative Templates > System > Removable Storage Access.

Step 3: Disable USB Access

To disable USB access, double-click on the policy “Removable Disks: Deny Execute Access” and set it to “Enabled“. This policy will prevent users from accessing USB drives on the computer.

Step 4: Apply the Policy

Finally, apply the policy by clicking on “OK” and exiting Group Policy Editor. The policy will take effect immediately, and users will no longer be able to access USB drives on the computer.

Conclusion

Disabling USB drives on Windows 10 and Windows 11 devices can help minimize the risk of data breaches and malware infections. By following the steps outlined in this article, you can disable USB drives on your Windows 10 and Windows 11 device quickly and easily. Remember to enable USB drives again if necessary in the future.