How to Disable USB Storage Devices in Windows (Complete Guide)

USB flash drives and external hard drives are convenient tools for transferring files, but they can also introduce security risks. Organizations often disable USB storage devices to prevent unauthorized data transfers, reduce the risk of malware infections, and comply with security policies.

Fortunately, Windows includes several built-in methods to disable USB storage without installing third-party software. This guide explains the most effective approaches for Windows 10 and Windows 11.

Why Disable USB Storage?

There are many reasons why businesses, schools, healthcare providers, and government organizations choose to restrict USB storage devices.

Common reasons include:

• Prevent unauthorized copying of confidential files.
• Reduce the risk of malware and ransomware introduced from removable media.
• Protect customer and company information.
• Enforce corporate security policies.
• Limit unauthorized software installation.
• Meet regulatory and compliance requirements.

Important: The methods in this guide disable USB storage devices only. Standard USB peripherals such as keyboards, mice, webcams, barcode scanners, receipt printers, and label printers continue to function normally.

 

What Devices Are Affected?

The following devices are typically blocked:

• USB flash drives
• External USB hard drives
• Portable SSDs
• USB memory sticks
• Many USB card readers

The following devices are not affected:

• USB keyboards
• USB mice
• Barcode scanners
• Label printers
• Receipt printers
• Webcams
• USB headsets
• USB network adapters

 

Method 1 – Disable USB Storage Using the Registry

Windows loads USB storage devices through the USBSTOR service. Disabling this service prevents Windows from mounting USB storage devices.

Disable USB Storage

1. Press Win + R.
2. Type:

regedit

3. Navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

4. Double-click Start.
5. Change the value to:

4

6. Restart the computer or unplug and reconnect the USB storage device.

 

Start Value Reference

Value	Meaning
3	Enabled (Default)
4	Disabled

 

Method 2 – Disable USB Storage Using a Batch File

Administrators can automate the registry change with a batch file.

Disable USB Storage

@echo off

echo Disabling USB Storage...

reg add "HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR" ^

/v Start /t REG_DWORD /d 4 /f

echo.

echo USB storage devices are now disabled.

echo Restart Windows or reconnect USB devices.

pause

Run the batch file as Administrator.

 

Enable USB Storage Again

To restore normal functionality:

@echo off

echo Enabling USB Storage...

reg add "HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR" ^

/v Start /t REG_DWORD /d 3 /f

echo.

echo USB storage devices have been enabled.

pause

 

Method 3 – Disable Using Local Group Policy

Available on: Windows Pro, Enterprise, and Education editions.

1. Press Win + R.
2. Type:

gpedit.msc

3. Navigate to:

Computer Configuration

→ Administrative Templates

→ System

→ Removable Storage Access

Enable one or more of the following policies:

• All Removable Storage classes: Deny all access
• Removable Disks: Deny read access
• Removable Disks: Deny write access

This method is ideal for centrally managed business computers.

 

Method 4 – Disable Individual USB Storage Devices

You can disable specific USB storage devices through Device Manager.

1. Open Device Manager.
2. Expand Disk drives.
3. Right-click the USB storage device.
4. Select Disable device.

This only affects the selected device.

 

Method 5 – Use Device Installation Restrictions

For organizations using Active Directory or Microsoft Intune, device installation restrictions can prevent new USB storage devices from being installed while allowing approved hardware.

This approach is commonly used in enterprise environments where users should not connect unknown storage devices.

 

Verifying That USB Storage Is Disabled

After applying one of the methods:

1. Insert a USB flash drive.
2. Windows should not mount or assign a drive letter.
3. File Explorer should not display the removable storage device.

If the drive still appears, restart the computer and ensure the changes were applied with administrative privileges.

 

Common Problems

USB keyboard and mouse stopped working

The methods in this article should not affect standard USB input devices. If they do, verify that you disabled USB storage rather than USB controllers.

External hard drive still works

Some devices may have been connected before the change. Disconnect and reconnect them, or restart the computer.

Registry change had no effect

Make sure the batch file or Registry Editor was run with administrator rights.

 

Security Best Practices

Disabling USB storage is only one part of a good security strategy. Consider combining it with:

• BitLocker drive encryption
• Microsoft Defender
• Strong user permissions
• Group Policy
• Regular Windows updates
• Endpoint protection software
• User security awareness training

 

Frequently Asked Questions

Does this disable keyboards and mice?

No. It only blocks USB storage devices.

Does this work on Windows 10 and Windows 11?

Yes. These methods are supported on both Windows 10 and Windows 11.

Can I still use barcode scanners and label printers?

Yes. Barcode scanners, receipt printers, label printers, and similar USB peripherals continue to operate normally because they are not USB mass storage devices.

Does it block external SSDs?

Yes. External USB SSDs and HDDs are generally recognized as USB storage devices and will be blocked.

Can I enable USB storage later?

Yes. Simply restore the USBSTOR service value from 4 to 3 or use the provided enable batch file.

Conclusion

Disabling USB storage devices is a simple yet effective way to strengthen the security of Windows computers. Whether you manage a single office PC or hundreds of business workstations, Windows provides built-in tools to block USB flash drives while keeping essential USB peripherals operational.

For home users, the Registry or batch file method is quick and easy. For business environments, Group Policy or centralized device management offers greater control and scalability.