Once in a while I have a friend, or customer that needs to keep people from using the USB ports to copy data off of a system.
It is easy to lock a machine down, disable the floppy, and cdrom in the bios. Many times when you try to disable USB – it disables it entirely.
This can be a real pain on newer laptops or systems that don’t even have a PS2 interface for the mouse or keyboard.
There is a simple registry change that will keep the USB storage drivers from starting when the system boots. Keeps people from walking up to a PC and copying data off with a USB key, but allows you to keep your scanner, keyboard, and mouse working.
As always – back your system up before messing around in the registry.
Go to Start -> Run -> Type regedit and hit Enter or click on the OK button.
Browse to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
Notice the value ‘Start’
Double click on the ‘Start’ in regedit and the default value data should be 3.
Switch this value data to 4, and USB storage devices are disabled.
Switch this value data back to 3, and USB storage devices are enabled.
For those of you that don’t feel like messing around in the registry, there is a freeware called IntelliAdmin USB Drive Disabler that does the registry modification above by just clicking a button.
[ Download IntelliAdmin USB Drive Disabler ]
Note: Eventhough the freeware clearly states that “Make sure you reboot after making the change”, you do NOT need to restart your computer in order to take effect in either way you use to disable removable storage devices such as USB drives. I’ve tried it ;)
Related posts:
great, thanks, approved + tested + working on windows xp home and windows 7 ultimate:-)
this is a good to save your data and computer. In those days USB id a big treat for system because virus can easily be transferred by it. lto 5 tape
how can i open the usbtor in regedit? i open regedit but i cannot locate the usbtor.. i think its missing in my registry key.. what do you think will i do for this case? please post a comment for my problem..^_^
how to block usb port in win me or 98
HAI I AM KHURSHID,i am 25yr old.iwant a computer hardwear & newtwarking job,my work experions is two year andsix months
hola estoy buscando ayuda porque tengo un problema con mi computadora, a cada momento me pide la unidad de diskete, es decir, la unidad A: pero esta computadora ya no viene con las unidades de diskete y quisiera saber como desactivo dicha unidad para que no me siga dando dicho error? se lo agradeceria en el alma.
how to disable diskette, cd and dvd? i mean, how can i do it like a usb? tnx. gb.
Inspite of changing the registry to usbStor to 3, im still not able to connect my pocket pc to the computer. What are the registry modifications required to enable to usb to be able to connect pocket pc etc ?
How I can allow only read access to a particular USB but not write access on that USB programmatically without manipulating registry settings?
Suggestions are appreciated.
Regards,
AKC
[...] 2 months ago I talked about how to disabe removable storage devices such as USB drives. This can be done locally if you have access to the system by a UsbStor value in registry. Now you can enable or disable removable storage devices remotely without even being in front of the computer. Of course you’ll need to authenticate yourself to the remote computer in order to make any changes. [...]
[...] 3 days ago I talked about how to disable removable storage devices such as USB drives but still allowing your USB scanner, keyboard, and mouse working. What if you to disable write access and only allowing read access to a removable storage devices such as a USB thumb drive? Theft of trade secrets and other corporate documentation gets easier and easier everyday. 1GB+ USB sticks can fit in your shirt pocket and that data that it can hold can be devastating to an organization. Front mounted USB ports just make it easier! [...]