USB storage device is the easiest way to transfer the data from one PC to another but at the same time, it also makes your system more vulnerable and exposed to potential data theft. If you know how the registry works on Windows PC then you can disable the USB without installing any third party application on your PC.
Remember you should be very careful while messing with the System registry, I recommend you the contact the official Microsoft support team to do this they can guide you in the safest way. If you are sure about what you doing and risk of it then you proceed with the instruction below.
Disable or Enable USB Port Without Any External Tools:
If a USB storage device is not already installed on the computer
If a USB storage device is not already installed on the computer, assign the user or the group and the local SYSTEM account Deny permissions to the following files:
- %SystemRoot%InfUsbstor.pnf
- %SystemRoot%InfUsbstor.inf
Doing this can prohibit users from installing any USB storage device on the computer. To assign a user or group Deny permissions to the Usbstor.pnf and Usbstor.inf files, follow these steps:
- Start Windows Explorer or My Computer and then locate the %SystemRoot%Inf folder.
- Right-click the Usbstor.pnf file, and then click Properties.
- Click the Security tab.
- In the Group or user names list, add the user or group that you want to set Deny permissions for.
- In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control.
Note: Also add the System account to the Deny list.
- In the Group or user names list, select the SYSTEM account.
- In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
- Right-click the Usbstor.inf file, and then click Properties.
- Click the Security tab.
- In the Group or user names list, add the user or group that you want to set Deny permissions for.
- In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control.
- In the Group or user names list, select the SYSTEM account.
- In the Permissions for UserName or GroupName list, click to select the Deny check box next to Full Control, and then click OK.
If a USB Storage Device is Already Installed on Your Computer
If a USB storage device is already installed on the computer then you can change the registry to make sure that the device does not work when the user connects to the computer.
If a USB storage device is already installed on the computer, set the Start value in the following registry key to 4:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesUsbStor
- Click Start, and then click Run.
- In the Open box, type regedit, and then click OK.
- Locate and then click the following registry key:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesUsbStor
- In the details pane, double-click Start.
- In the Value data box, type 4, click Hexadecimal (if it is not already selected), and then click OK.
- Exit Registry Editor.
