Windows 7 - Disable USB Drives

Posted on 2011-04-22
Last Modified: 2012-08-14
Looking for a free (or low-cost) solution for blocking user access to usb-drives in Windows 7 and XP environment.

From what I've read, with Group Policy, it the GPO only works on blocking access to those USB Drives whose drivers have already been loaded in the computer. So after the GPO's applied, if I plug in a new USB flash drive into the system, it will load the driver and USB Flash drive will be accessible.

Not sure if there's a good solution for this, and if there is, can you apply it to only specific users? Wouldn't want to prevent an admin from logging on a system under their account and running necessary repair tools from a USB Flash drive (assuming network drives are inaccessible).
Question by:garryshape
    LVL 26

    Accepted Solution

    USB-Set is free but will disable for the computer, not by user.

    Author Comment

    Thanks for the suggestion. It looks like that has to be installed on the systems though. What's your experience with it?
    LVL 26

    Assisted Solution

    by:Thomas Zucker-Scharff
    Yes it does need to be installed.  I have installed it on our machines and it has worked very well.  I set it to silently innoculate all USB devices and network devices that are attached to the computer.  I also set the switches to disable autorun.  It simply writes a folder called autorun.inf with a file in the folder that has the hidden and read only bits set.  Just doing this has cut down infections from USB sticks to 0 on computers that are used in areas like conference rooms.

    The setup takes very little time per computer, I usually do it when I've been asked to do something else on the computer that requires me to be physically there.
    LVL 5

    Assisted Solution

    You can disable USB storage device from group policy. You will need to extend the group policy by importing an administrative template, then the setting to disable usb storage devices will be aavailable just like other settings.

    The settings ar available form microsoft from the following link:

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    Ever wondered why Windows 8 and 10 don't seem to accept your GPO-based software deployment while Windows 7 does? Read on.
    Email signature management is something that is often overlooked in many organizations or is simply not implemented effectively. Let's take a look at what methods are available for managing this important piece of corporate branding.
    This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
    This Micro Tutorial will go in depth within Systems and Security in Windows 7 and will go into detail regarding Action Center, Windows Firewall, System, etc. This will be demonstrated using Windows 7 operating system.

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now