You can disable use of USB Drives and USB Storage on your Windows 10 computer by using Group Policy, changing security settings and by using Registry.
Disable USB Drives and USB Storage Devices in Windows 10
Portable USB Drives rank among the top sources for spread of malware and viruses in Windows computers.
Hence, it makes sense to disable USB Drives on a computer and cut down the risk of malware being transmitted to the computers vis USB Drives and USB Storage Devices.
Another reason for disabling USB Drives on a Windows computer is to protect data and prevent anyone making a copy of your files on the computer.
1. Disable USB Drives Using Group Policy
If you are using the Professional version of Windows 10, you can disable USB Drives on your computer using Group Policy Editor.
1. Right-click on the Start button and click on Run.
2. On the Command screen, type gpedit.msc and click on OK.
3. On Local Group Policy Editor screen, navigate to Computer Configuration > Administrative Templates > System > Removable Storage Access.
4. Select Removable Storage Access in the left-pane. In the right-pane, double-click on Removable Disks: Deny Read Access entry.
5. On the next screen, select Disabled option > click on Apply & OK to save this setting.
This will apply the policy at Machine Level, preventing all Users on your computer from accessing files located on USB Storage Drives.
Similarly, you can disable Write Access for all Users by enabling Removable Disks: Deny Write Access Policy.
If you only want to Apply the policy at User Level, navigate to User Configuration > Administrative Templates > System > Removable Storage Access.
Note: It is important to apply Removable Disks: Deny Execute Access policy, if your intention is to prevent any malicious code in the USB Drive from running on your computer.
2. Change Security Settings for usbstor.PNF
If you are using the Home Edition of Windows 10, you can disable the use of USB Drives and on your computer by changing security settings for usbstor.PNF file.
1. Open the File Explorer on your computer and navigate to C:\Windows\INF folder.
Tip: You can access this location by typing “C:\windows\INF” in the search box.
2. In the INF Folder, right-click on usbstor.PNF File and click on Properties.
3. On INF Properties screen, click on the Security tab > select Users entry and click on the Edit button.
4. On usbstor.PNF permissions screen, check the Deny box located next to “Full Control” entry.
5. Click on Apply & OK to apply this change on your computer.
Note: You also need to Add the System Account to Deny List, using the same steps.
3. Disable USB Storage Devices Using Registry
If the USB Storage Device has already been used on your computer, you need to make changes in the registry file to prevent its use on your computer.
1. Open Run Command > type regedit in the Run command window and click on OK.
2. On Registry Editor screen, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR.
3. Click on USBSTOR in the left-pane. In the right-pane, double-click on the Start entry.
4. On Edit DWORD pop-up, change the Value data from 3 to 4 and click OK .
5. Restart your computer for this change to Apply.
Note: This method works only if the driver for USB Storage Device is already installed on your computer.
