Link to home
Start Free TrialLog in
Avatar of Shaun Wingrin
Shaun WingrinFlag for South Africa

asked on

Blocking of USB Port

Say, kindly send link to software that block users from getting access to USB Ports. This software needs to run under XP and Windows7.
I have done an Internet search and found 1 or 2 options, but none of them are satisfactory.
I am looking for tried and tested software that will block a USB Port and restrict users from getting access to them.
Avatar of netcmh
netcmh
Flag of United States of America image

Have you see securityxploded.com/windows-usb-blocker.php ?
Alternatively, you could use GPEdit.msc, which is native to your OS, to disable USB Ports

 1. Go to Run.
 2. Type > gpedit.msc and press enter.
 3. Under Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access

Change the state to Enabled for for Removal Disks as below :

Removable Disks: Deny execute access Enabled
Removable Disks: Deny read access Enabled
Removable Disks: Deny write access Enabled

In the right pane, right click on Removable Disks: Deny read access and click on Properties.
If on a domain you can do this via Group Policy, similar to netchm his post above on local group policy
In addition if they have a managed antivirus solution from a reputable vendor, it is likely that the USB can be blocked that AV level too. No need for software. Software is too easy to bypass by users.
it is too costly to figure out, so i always recommend to use physical blocker

http://www.amazon.com/Lindy-USB-Port-Blocker-Green/dp/B000I2JWJ0

Overall, it will be cheaper to run this then implement a software
Avatar of Shaun Wingrin

ASKER

Once more specification - it needs to have a password to unblock the USB ports please.
I don't think something like that is available. You can do this restriction if you're an admin on the box.

Use Regedit, navigate to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR.

The value inside that key is Start. To disable USB storage, change Start’s data to 4. To enable it again, change the data to 3.

You could also just copy the below into a notepad:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
”Start”=dword:00000004

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR\Enum]
”Count”=dword:00000000
”NextInstance”=dword:00000000

save it as disableusb.reg. Make sure it’s saved as a REG file, not a TXT file.

Make another reg file with the same config as above with just one change :

”Start”=dword:00000004, and change the 4 to a 3.

Save the file as enableusb.reg
Will this work on XP?
Yes
Anyone know if such software that can password protect the setting
Does not exist to my knowledge.
You could however see if you can turn off USB in BIOS, and PW protect BIOS,
You would need to use a PS2 mouse & keyboard if this is done.
I've previously used such software - anyone else aware of such software?
Googled and found this. Its very easy to bypass though software such as this. Would not recommend it for corporate or professional use. Maybe for home users. Have a peek and see if it suits.

USB Locker
It doesn't use a  password ....
It does. I just tested it out of interest... It even specifically states lock USB with password protection as a selling point :)
There are also 5 alternatives on that page near the end with more options for locking USB (I have not tested those however)
Pls can you send the link to the one you tested - I may be downloading the incorrect version.
ASKER CERTIFIED SOLUTION
Avatar of Maclean
Maclean
Flag of New Zealand image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Excellent thankyou