Homepage 5 How-to Articles 5 How to Disable USB Drives in Windows OS

How to Disable USB Drives in Windows OS

Manage remote endpoints, deploy software and patches with Action1 cloud RMM solution.

Sign up and use free on up to 50 endpoints with no functionality limits or expiration.

October 11, 2019

By connecting a USB drive to your computer, any user can infect it with malware or copy important information from it. In today’s article we will look at how to disable USB drives in Windows 10.This method works in Windows 10 Pro, Enterprise or Education.

1. Disable Usb Drives in Registry Editor

This method works in all editions of running Windows 10, and it disconnects only USB drives, without affecting the mouse, keyboard, and printer connected via USB. Before editing the registry, it is recommended to create a system restore point.

Open Windows registry editor: in the search bar or in the menu to execute (run with the Win + R keys) enter the regedit command and press the Enter key.

First step to Disable Usb Drives is to open regedit win 10.png

Go to HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Services \ USBSTOR. In the USBSTOR section, open the Start => parameter in the “Value” field, set 4 and click “OK”.

open section USBSTOR

Now, if you connect a USB flash drive to a computer, it will not be displayed anywhere, and in Device Manager you will see an error installing the driver for this device. If you want to re-enable USB drives in the future – change the value of the “Start” parameter to 3 and click “OK”.

2. Disable Usb Drives in Group Policies

First of all you need to open local group policy editor.

In the search bar or in the menu to execute (execute is called with the Win + R keys), enter:


and press the Enter key.

disable usb drives windows

Then you need to open Removable Disks: Deny Execute Access

To do this open “Computer Configuration” => “Administrative Templates” => “System” => “Removable Storage Access” => in the right pane, open “Removable Disks: Deny Execute Access”.

Open Computer Configuration

After that choose “Enabled” and click “OK”. Also put is included in “Removable disks: Deny Read Access” and in “Removable disks: Deny Write Access”, they are also found in “Computer configuration” => “Administrative templates” => “System” => “Removable Storage Access”.

enable Removable disks Deny Write Access

3. Enable or Disable Usb Ports Through Device Manager

IMPORTANT: We recommend creating a system restore point before disconnecting the USB ports so you can easily turn them on again whenever you want.

Right-click on the “Start” button on the taskbar and select “Device Manager”.

start Device Manager

Expand USB Controllers. Right-click on all entries, one after another, and click “Disable Device”. Click “Yes” when you see a confirmation dialog.

USB Controllers disable device

4. Disable or Enable Usb Ports in BIOS

Some manufacturers offer an option in BIOS / UEFI to disable or enable USB ports. Download the BIOS / UEFI and check if there is an option to disable or enable USB ports. Check your PC user manual to find out if the option to enable or disable USB ports is present in the BIOS / UEFI.

Disable or Enable Usb Ports in BIOS

Consider Using Action1 to Block USB Ports Remotely if:

  • You need to perform an action on multiple computers simultaneously.
  • You have remote employees with computers not connected to your corporate network.

Action1 is a cloud-based remote monitoring and management platform for patch management, software deployment, remote desktop, IT asset inventory, endpoint management.

Related Articles

How To Delete User Profiles Remotely with PowerShell

When a user logs onto the computer for the first time (not via the network to access shared folders or printers), Windows creates a user profile. Among its contents are the NTUSER.DAT file (user profile settings), user-specific folders (My Documents, Desktop, etc.),...

About Action1 RMM

Action1 RMM is a cloud-based IT solution for remote monitoring and management, patching, and remote support.

Start your free two-week trial of Action1, or use RMM tools for free forever on 50 endpoints with no functionality limitations!


Submit a Comment

Your email address will not be published.

cloud patch management solutions action1

MSP Solution

Centralize endpoint management and boost efficiency of IT service delivery.

automated server patch management action compliance

Patch Management

Identify and deploy missing OS and third-party software updates.

cloud software deployment tools windows

Software Deployment

Distribute software and updates across managed endpoints.

software distribution tools software inventory action1

IT Asset Inventory

Keep a detailed inventory and manage hardware and software assets.

web client remote desktop

Remote Desktop

Support users via seamless remote desktop connection.

web based rdp client

Unattended Access

Provide administrative support and manage remote devices.

automated patch management action1

Endpoint Management

Run PowerShell, custom scripts, reboot computers and restart services.

API integrations action1


Integrate Action1 RMM to your IT ecosystem.

computer inventory tool for compliance

Reports and Alerts

Conduct endpoint security audits with comprehensive reporting.