How you can prevent users from connecting to a USB storage device

        A good IT administrator secure his network behind firewalls. An sensible spot in security is USB storage device. To prevent users from connecting to USB storage devices, use one or more of the following procedures, as appropriate for your situation. When you have already instaled USB device you need to deny access on it. You can do this directly from registry settings.


We strongly recommended that you back up the registry before making any changes and that you only change values in the registry that you understand or have been instructed to change.




Enable USB Storage devices

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\USBSTOR]
"Start"=dword:00000003
"Type"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
  00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,00,\
  52,00,2e,00,53,00,59,00,53,00,00,00
"DisplayName"="USB Mass Storage Driver"
"DriverPackageId"="v_mscdsc.inf_x86_neutral_ef3a0c30c03f0225"
"BootFlags"=dword:00000004



Disable USB Storage devices

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\USBSTOR]
"Start"=dword:00000004
"Type"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,\
  74,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,44,00,52,\
  00,49,00,56,00,45,00,52,00,53,00,5c,00,55,00,53,00,42,00,53,00,54,00,4f,00,\
  52,00,2e,00,53,00,59,00,53,00,00,00
"DisplayName"="USB Mass Storage Driver"
"DriverPackageId"="v_mscdsc.inf_x86_neutral_ef3a0c30c03f0225"
"BootFlags"=dword:00000004