Block usb storage devices windows xp

Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:.

To set the Start value, follow these steps:. In the Open box, type regedit, and then click OK. In the Value data box, type 4, click Hexadecimal if it is not already selected , and then click OK.

Check whether the problem is fixed. If the problem is fixed, you are finished with this article. If the problem is not fixed, you can contact support. Please contact the vendor of your USB device to ask about a newer driver. For information about your hardware manufacturer, visit the following Web site:. This contact information may change without notice. Learn how your comment data is processed.

We currently deploy everything settings, apps, etc to the computer not to the user, so the user step of the I'm always grabbing useful PowerShell commands or small scripts that I find useful.

Here a couple from this week. Skip to the content. Home July 9 Blocking usb storage devices with intune. Below is the solution which is working for bit Windows but not working bit I need a same function which can do the same thing for 64 bit It seems Microsoft has changed this for Windows Here are the new GPO settings you also need to use if you have Windows 7 clients:.

I don't think that it is possible to apply the computer settings in a GPO based on the user account. When the logon dialog is displayed, the computer settings from all GPO's have already been applied and Windows won't apply computer settings at user logon. The inverse of what you need is possible, i.

This is called loopback processing. But as I said, that won't help you. What you could do is change the security settings configured by this GPO to deny access to a particular group instead of allowing access for admins as I suggest in my article.

I haven't tried it, but it might work. The GPO will be applied independent of the user but the security settings of the driver files will be modified by the GPO to disallow access to a certain group of users. This means that for regular users access will be allowed while users in the special group it will be denied. We use another way of blocking usb devices. Our desktop management system - desktop authority handles this task quite well. After upgrading to new version several weeks ago we have some nice new abilities for managing anuthorized access to usb ports.

Now we can block or allow only particular devices by the serial numbers or manufacturer IDs. Hi, This is the exact post what I was trying to find. I did all the steps as mentioned above.

It is not working for me.. I can see the 'Services und Drivers' under Administrative Templates. I can enable the 'USB Storage'. But it is in red color. But it is showing 'Enabled' under Settings. What could be the problem..? Hi Hannes and expert, There is a system error has occured during execute "net start usbstor" on command prompt. The explanation given "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

I can confirm this works - had to figure that out for myself but adding an additional line at the end corrects the above issue. If you follow the step-by-step guide pcs 'must' be rebooted as the policy you are applying is to computers on the network and policies are applied on connection to a network which happens during the boot-up process.

Just run the command with the usb storage device plugged in and all should be well :. If so, try adding an empty line at the end of the ADM file. See this post for details. I also changed the file attached to this article to include a newline at the end. Home » Articles about » Operating Systems » Windows. Theoretically, I think the. Theoretically, I think the following should allow for select users to have access to USB storage while blocking others.

Though it may not start the USBStor service when logging on as a user with access, on a machine that was logged in as a user without access, without having rebooted.

If users do not swap between computers often, I doubt this will be a problem, and it will be fine after a reboot or manually starting the service if you really want to Create a new group policy with the following configurations.

Note the different Data value and Item-level Targeting between the two entries. I haven't concluded testing, but so far this appears to work.

I need to disable USB port of the computer using c.. DWord ; i can read the value on windows 64 bit but can not write the value OpenBaseKey Microsoft. LocalMachine, RegistryView. Registry64 ; Console. GetValue "Start" ; Console. SetValue "Start", 4 ; can any one help ADM file to enable. Thank you for your great efforts just i have tried your ADM file with some OU's to disable the USB storage and its working fine but i still have a problem because i want to exclude users from this OU whereas, controls disabling and enabling the USB with certain users and that if i wanted to exclude some user and enabling the usb for him just for one or two days for business needs and then block the USB again..

My DC is Server so this tutorial might be a little bit outdated. Disable wireless devices. It worked for me. Wireless devices? Re: Extra settings for Windows 7.

Extra settings for Windows 7. This method worked for me This method worked for me. At first it worked without any errors. Leave this field empty. Home About. The set of Group Policies allows to control the installation and use of removable media on Windows appeared only in the AD version In case of stand-alone computer, the USB-device restriction policy can be edited using a local Group Policy Editor — gpedit.

Local Group Policy Editor is no available in the Windows Home editions, but you can install it like this: How to enable gpedit. Disabling USB storage will take effect immediately after the policy is applied no need to restart your computer. If a USB flash drive is connected to the computer, it will be available until it is reconnected. Similarly, you can create your own policies for device classes that are not listed in this list.

Related Reading. January 10, December 30, Mohammed Alshambaty September 21, - am By mistake i made the same but i evoked the policy but the USB is still blocked im also using win server R2. Gary February 2, - am Can you teach how to limit to which user log-in to disable USB mass storage drive? How can i Enable in a local computer.

Jennifer November 27, - pm Hi, I applied this policy to the entire domain and added the administrators group as a deny as instructed above.