Link to home
Start Free TrialLog in
Avatar of James Osborne
James Osborne

asked on

Lock Down USB ports in Windows 10

We're looking for a way to restrict access to USB ports.  We're deploying a number of new Windows 10 Pro PC's and want to lock them down so ONLY the keyboard and mouse work with the PC's.  Anyone know of a third party application or other way to tie the devices down?
ASKER CERTIFIED SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ☠ MASQ ☠
☠ MASQ ☠

Use a GPO
User Configuration \ Administrative Templates \ System \ Removable Storage Access \ All Removable Storage classes: Deny all access.

Also see Sean’s excellent article on blocking USB storage via registry settings here:
https://www.experts-exchange.com/articles/23800/Disable-USB-mass-storage-devices-via-the-registry.html
Use GPOs to forbid storage devices. See the GPO section. Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access. Or, even try to stop installation of USB devices in total: Computer Configuration | Administrative Templates | System | Device Installation | Device Installation Restriction
The old article https://technet.microsoft.com/en-us/library/2007.06.grouppolicy.aspx still applies.
I wonder why this solution should be the only solution. It does not cover other USB devices, only USB storage devices. Mine covers other devices, too.