How to block or Disable USB Flash drives in Windows XP

This Post talks answers the below queries.

1. How to block Mass drives , USB Flash Memory devices in XP based PCs?

2. How to remove ability to install new ?

3. How to disable autorun feature of USB drives ?

Next post answers

3. How to enable Blocked USB mass storage devices or flash memory devices in corporate networks?

—-

Typically USB Mass storage devices like USB Flash drives or Pen Drives or similar devices (,Transcend ,U3 Micro cruzer, Kingston ) and Portable drives like , etc or any USB mass storage device can be blocked in PCs by editing registry and removing some driver files/making the files protected.

Step 1 : If the device is not installed already and you need to block any new installations
The access to following files can be restricted.

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

Where %SystemRoot% is C:\Windows\System32\ Folder if windows is installed in C. Replace the drive letter based on installation.
Hence you should look for these files under


C:\Windows\System32\Inf\Usbstor.inf

This file has driver information about USB Mass storage devices. If this file is made restricted or deleted, users cant install new Flash drives or any USB hard drives. [This will not affect other USB devices like Mouse, etc]. When we say restricted make the file accessible only to administrators, if you are talking about kiosk, center PC just delete the Usbstor.inf file so no one can install .

2. If your USB mass storage device is already installed then change the below registry entry value to 4. Its default value is 3 which is USB Mass storage devices enabled condition.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

When you do this, the USB storage device does not work when the user connects the device to the computer.
To set the Start value, follow these steps:

1. Click Start, and then click Run.
2. In the Open box, type regedit, and then click OK.
3. Locate and then click the following registry key:
4. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
5. In the details pane, double-click Start.
6. In the Value data box, type  4, click Hexadecimal (if it is not already selected), and then
7. click OK.
8. Exit Registry Editor.

Your USB Mass storage devices will not be detected if this value is changed. This will NOT affect Mouse,Keyboard or any other USB .

(Visited 198 times, 1 visits today)

16 Replies to “How to block or Disable USB Flash drives in Windows XP”

  1. This did not stop my employees to connect their Nokia phones and use the memory of the phone. Any chance to stop them using mobile phones or any kind of device with storage capabilities?

  2. You can run “regedit.exe” file from %systemroot%\windows if you are unable to access ‘Run’ command. for ex : c:\windows\regedit.exe

  3. when we use another usb (different company make) the value of USBSTOR is automatically changed from 4 to 3. what we do that the value is remian 4 ?

  4. Excellent Job.

    Works to block everything I wanted. Including Phones. BTW, tested with Nokia 5800 & Blackberry Bold 9700. BB software was already installed. The Nokia has not been plugged into the PC before. But both was not detected. So I’d say this tip works like a charm.

    Thanks.

  5. What’s Going down i am new to this, I stumbled upon this I have found It absolutely helpful and it has aided me out loads. I’m hoping to give a contribution &
    assist other customers like its helped me. Good job.

Leave a Reply

Your email address will not be published. Required fields are marked *