HOW TO DISABLE THE USE OF USB STORAGE DEVICES

Technical support for IT query
Post Reply
pavan.arava
Posts: 3
Joined: 22 Feb 2016 20:06

HOW TO DISABLE THE USE OF USB STORAGE DEVICES

Post by pavan.arava » 23 Feb 2016 12:32

:shock: :shock: HOW TO DISABLE THE USE OF USB STORAGE DEVICES :mrgreen: :mrgreen:

To disable the use of USB storage devices, use one or more of the following procedures, as appropriate to your situation.

• Disable the USB device From Bios :roll:
Disable the access of USB device from bios.

• Disable access to driver files

Deny permissions to the following files:
• %SystemRoot%\Inf\Usbstor.pnf ex: C:\WINDOWS\inf\Usbstor.pnf
• %SystemRoot%\Inf\Usbstor.inf ex: C:\WINDOWS\inf\Usbstor.inf
When you do so, users cannot install a USB storage device on the computer. To assign a user or group Deny permissions to the Usbstor.pnf and Usbstor.inf files, follow these steps:
1. Start Windows Explorer, and then locate Usbstor.pnf file in %SystemRoot%\Inf folder.
2. Right-click the Usbstor.pnf file, and then click Properties.
3. Click the Security tab.
4. In the Group or user names list, click the user or group that you want to set Deny permissions for.
5. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
Note In addition, add the System account to the Deny list.
6. Right-click the Usbstor.inf file, and then click Properties.
7. Click the Security tab.
8. In the Group or user names list, click the user or group that you want to set Deny permissions for.
9. In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.

• Disable detection and usage of mass storage devices

Start > Run > REGEDIT Browse thru
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
Change the value of the DWORD key "Start" to 4.
(Any device connected to the system at the time the registry is changed will not be affected until pc is rebooted. Once it’s unplugged, however, it can not be reconnected.)
To enable access for Mass storage devices change the DWORD Value "Start" and set it equal to 3 and exit registry and reboot PC

• Prevent users from copying sensitive files to usb

In Windows you can prevent this by making a registry entry that makes any USB devices that are plugged into your machine read-only so users can’t transfer files to them. :( :(
Start > Run > REGEDIT Browse thru
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control and create a new KEY named StorageDevicePolicies if not created earlier. Then within this key created a DWORD value named WriteProtect and set it equal to 1, exit registry and reboot PC

To Enable WRITE access for Mass storage devices change the DWORD Value to 0
To Disable WRITE access (Read-only) for Mass storage devices change the DWORD Value to 1



Post Reply