How to Disable USB Ports

You are here:

Home
Support
Data Security in Office
How to Disable USB Ports

12 July 2018 Amanda J. Brook Senior Product Manager

Summary
In most company, desire of restricting the use of USB ports is very common. Preciously, they just want to forbid staff from using USB storage devices which may harm the data security. Here, we will introduce how to disable USB ports without influencing the normal use of other USB devices.

It is common for enterprises to disable USB Ports to get a better protection to data security. Preciously, the enterprises just want to prevent USB-based storage devices from connecting to computer. However, more and more USB devices are available now. How to limit the use of USB-based storage devices without influencing the usage of other USB devices has attracted most attention. Here, different methods to disable the USB ports will be introduced.

Catalog

Method 1: Physically Lock USB Port
Method 2: Make USB-Based Storage Devices to be Read-only via Group Policy Settings or Registry
Method 3: Disable USB Ports Completely with Registry
Method 4: Disable USB Ports with Devices Manager or BIOS
Method 5: Lock USB Ports with Renee USB Block
Conclusion

Method 1: Physically Lock USB Port

Physically lock is a primitive but effect method to disable USB ports. Here, we can find 2 methods:

Clog up all USB ports with hot glue. This method can prevent any USB devices from connecting to computer,
Lock the desktop with locking case. Unless other users disassemble the case violently, other can not connect USB storage devices to computer.

Iron case with lock

Use hot clue to disable USB ports

Advantages:

Effective physical methods. No need to go through complicate disable settings.

Disadvantages:

Users need to have a strong manipulative ability.
Not so pretty.
Hard to recover from violent modification.

Recommendation:

With Renee USB Block, users can easily lock USB-based storage devices, filter USB-based storage devices in white list, block certain website and software, etc.
Compatible with Windows 10、Windows 8.1 & 8、Windows 7、Window Vista、Windows XP, etc. Batch order may get the highest 60% OFF discount.
Click for more about Renee USB Block .

Method 2: Make USB Storage Devices to be Read-only via Group Policy Settings or Registry

Making USB-based storage devices to be read-only via Group Policy Settings or Registry can prevent users from coping data to this USB devices.

Make USB-Based Storage Devices to be Read-only via Group Policy Settings

Step 1: Open the run dialog box by pressing Win + R. Then please enter “gpedit.msc” and press “OK”.

Step 2: Navigate to the following key: Computer Configuration – Administrative Templates – System – Removable Storage Access. Then please find and double click “Removable Disk: Deny write access”.

Step 3: Choose “Enable” in the pop up window and then please click “OK” to save the settings.

Make USB-Based Storage Devices to be Read-only via Registry

How to Disable

Go to “Start” > “Run” and enter “regedit” in the pop up window to launch
“Registry Editor”. Then please navigate to the following key: HKEY_LOCAL_MACHINE\SYSTEM \CurrentControlSet\Control, create a new DOWRD value, name it to be “WriteProtect” and set its value to be 1.

Also, users can create a new text file and paste the code below. Then please save the text file with extension of “.reg”. Double click this new created file and import it to Registry Editor. After that, writing to USB-based storage devices will be forbidden. (Users can also click here to download the code file.)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies]

@=””

“WriteProtect”=dword:00000001

How to Enable

When you want to regain the permission of writing data to USB-based storage devices, just delete the DWORD value you just created or set its
value to be 0.

Also, users can create a new text file and paste the code below. Then please save the text file with extension of “.reg”. Double click this new created file and import it to Registry Editor. After that, writing to USB-based storage devices will be allowed. (Users can also click here to download the code file.)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies]

@=””

“WriteProtect”=dword:00000000

Advantages:

Built-in function. No need to make use of other software.

Disa：

This method is easy to be cracked. Those who are familiar with computer can easily release the restriction.

Recommendation:

Method 3: Disable USB Ports Completely with Registry Editor

Forbid the Use of USB-based Storage Devices

Create a new text file and paste the code below. Then please save the text file with extension of “.reg”. Double click this new created file and import it to Registry Editor. After that, the use of theUSB-based storage devices will be forbidden. (Users can also click here to download the code file.)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]

“Type”=dword:00000001

“Start”=dword:00000004

“ErrorControl”=dword:00000001

“ImagePath”=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\

52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\

00,52,00,2e,00,53,00,59,00,53,00,00,00

“DisplayName”=”USB Mass Storage Driver”

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]

“Security”=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\

This script controls the USB ports via modifying the USB ports. The most important value in this script is:
“Start”=dword:00000004 000000004 which means to disable USB ports. If it is changed to 00000003, USB ports will be enabled.

How Does it Work

Before forbidden, computer can access to USB-based storage device

After forbidden, computer can not access to USB-based storage device

Enable USB-based Storage Devices

Create a new text file and paste the code below. Then please save the text file with extension of “.reg”. Double click this new created file and import it to Registry Editor. After that, the use of the USB-based storage devices will be eabled. (Users can also click here to download the code file.)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]

“Type”=dword:00000001

“Start”=dword:00000003

“ErrorControl”=dword:00000001

“ImagePath”=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,\

52,00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,\

00,52,00,2e,00,53,00,59,00,53,00,00,00

“DisplayName”=”USB Mass Storage Driver”

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Security]

“Security”=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\

00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\

Advantage:

Built-in function. No need to make use of other software.

Disadvantages:

The operation of Registry Editor is a little troublesome and not so users-friendly to computer newbie. Besides, if the script you download is not qualified or incorrect, your may get your computer into a trouble situation.
This method is easy to be cracked. Those who are familiar with computer can easily release the restriction.

Recommendation:

Method 4: Disable USB Ports with Devices Manager or BIOS

We can also disable USB ports with hardware.

1. Disable USB Ports with BIOS

We can disable the USB ports in BIOS and then all USB ports will not work.

Step 1: Launch target computer and press related button to enter BIOS.(Usually with Del button)

What is BIOS?

BIOS, shorts for Basic Input Output System, can be regard to be a build-in system of motherboard. It is responsible for the settings of hardware in system, system boot and basic read/write operation.

How to enter BIOS? Click here for more!

Step 2: Select Disable option in related USB settings. Then all the USB ports of this computer will be disabled.

2. Disable USB ports in Devices Manager

Users can also disable the USB ports with built-in Devices Manager.

Step 1: Right-click “Computer” and click “Properties” to access Device Manager. After that, please click “Device Manager” in the pop up window.

Users can also get access to “Device Manager” by entering “devmgmt.msc” in Run Window (Press Win button + R to launch this window).

Step 2: Uninstall all the USB devices in Universal Serial Bus controllers. Then all USB ports will not work.

how to format sd card and fix it by disabling all usb port on windows 10

Although we can restrict the use of USB-based storage devices, the normal use of other USB devices like keyboard, mouse and HIGH-FI will be influenced at the same time. This method is not so convenience.

Advantages：

Disable/block all the USB ports. Others can copy data from computer with
USB-based storage devices.

Disadvantages:

Disabling all the USB will also effect the normal use of other USB devices like keyboard, which is not so convenience.
Re-install drive for all the related controllers can enable the USB ports again.

Recommendation:

Method 5: Lock USB Ports with Renee USB Block

The methods we introduced about are easily to be crack. Besides, users feels inconvenience when disabling USB ports with the methods above. So is there any safe and effective method which can prevent other from coping data to USB storage devices? We recommend you to try Renee USB Block.

What is Renee USB Block?

Renee USB Block is designed to restrict the access of USB-based storage devices. It can help users to forbid the writing/reading of USB storage devices which is not listed in White list. This can improve the data security and prevent from privacy leak.

Why using Renee USB Block will be Safer?

Different from other software which use basic function in Windows system, Renee USB Block uses the low layer driver to lock the auto read function when other memory devices connect to computer via USB.

In computer. a device driver is a computer program that operates or controls a hardware which attached to a computer. The driver communicates with the device through the computer bus to which the hardware connects. For example, we connect a printer to computer. We want to print a Word document and send the Print order. Then the driver of the printer will communicate with the related printer and make it print. In another word, hardware will not work normally if we do not install the related driver.

When installing Renee USB Block, a USB filter driver will be installed at first. (This USB filter driver will only restrict the use of USB-based storage devices and will not influence the normal use of other USB devices like keyboard, mouse, etc.）

After installation finished, computer will send a USB reading order when users want to get access to USB storage devices. This order will go through
the filter drive at first:

Situation 1: The USB device has been added to the White List of Renee USB Block.

Situation 2: The USB device is not in the White List of Renee USB Block.

As we can get from the illustration above, Renee USB Block can tell whether the inserted USB storage device is in the white list. Only USB storage devices in the white list will be readable, which can prevent computer from virus infection or data heist. Besides, Renee USB Block will not influence the normal use of other USB devices.

How to Restrict the USB-based Storage Devices with Renee USB Block?

Before introducing the restriction of USB storage devices, let’s get more about the white list function in Renee USB Block.

Whit List Function in Renee USB Block:

It is annoying for users to enter the password every time they insert the trusted USB storage devices. Here we can make use of the white list function in Renee USB Block to tell the trusted USB-based storage devices from the untrusted one. This function can prevent computer from threats in
USB disk and free the trusted disk from limitation at the same time.

Step 1: Insert trusted USB-based storage devices to computer. Then please launch Renee USB Block and click “Add” in White-list function.

Step 2: Choose the target USB storage device in the list and add remarkable label for it. Click “OK” to save the settings.

After added to white list, all operation of this USB storage device will not be limited.

Disable Reading USB Storage Devices:

Step 1: Launch Renee USB Block. Check “Disable Reading USB Disk” in “USB & CD Lock” function.

Step 2: Choose the target USB storage device in the list and add remarkable label for it. Click “OK” to save the settings. After added to white list, all operation of this USB storage device will not be limited.

Step 3: Only with the correct password of Renee USB Block, users can get access to USB storage devices.

Disable Writing to USB Storage Devices:

Step 1: Launch Renee USB Block. Check “Disable Writing to USB Disk” in “USB & CD Lock” function.

Step 2: Only with the correct password of Renee USB Block, users can get access to the inserted USB storage devices.

Step 3: After that, users can only read the data inside any USB storage devices but can not make any changes or save new data to the USB storage devices.

In other words, others can not copy data in your computer with USB storage devices.

Besides the restriction settings of USB storage devices, Renee USB Block also provides restriction settings of CD/DVD, SD card reader、Android/iOS devices. Provide overall protection to your computer.

Advantages:

Provides better protection with the low layer driver USB filter protection.
Intelligence USB storage device protection which can tell USB storage devices from other USB devices.
Flexible! Support to limit writing to and reading USB storage devices.

Disadvantage:

All function will be available in 10 minutes in Trial version.

Conclusion:

On the basis of preventing malice attack and data transfer with USB-based storage devices, method 1 is crude and hard to recover. Also it is hard to apply on batch computers. So we do not recommend this method. For method 2, 3 and 4, they can restrict the use of USB ports but can not fulfill the requirement of business level. Because anyone who is familiar with computer can restore it back.

However, with Renee USB Block in method 5, we can get overall protection to data inside the computer with the low-level filter drive. Free these computer from infection or unauthorized data transfer with USB-based storage devices. Also, Renee USB Block is one of the best software to restrict the use of USB storage devices. It is suitable for offices and enterprises.

Related Hot Guidance: