USB flash drives and external storage devices are convenient, but they can also pose serious security risks. Unauthorized USB usage can lead to data leaks, malware infections, and compliance issues—especially in business environments.
In this guide, we’ll show you simple ways to block USB ports on Windows to keep your data safe.
Why Block USB Ports?
Blocking USB ports helps you:
- Prevent data theft
- Reduce malware infections
- Enforce company security policies
- Control removable device usage
- Improve compliance and accountability
Method 1: Block USB Using Group Policy (Windows Pro & Enterprise)
Best for offices and managed computers
Steps:
- Press Windows + R, type
gpedit.msc, and press Enter - Navigate to:
Computer Configuration → Administrative Templates → System → Removable Storage Access - Double-click “All Removable Storage classes: Deny all access”
- Select Enabled
- Click Apply → OK
- Restart the computer
All USB storage devices will now be blocked.
Method 2: Block USB Using Registry Editor (All Windows Versions)
Use carefully – incorrect changes may affect system stability
Steps:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
- Double-click Start
- Change the value:
4= Disable USB storage3= Enable USB storage
- Click OK and restart
USB storage devices will be blocked after restart.
Method 3: Use Endpoint Security or MDM Tools (Recommended for Businesses)
For organizations, the best approach is using endpoint security or device management tools such as:
- Kaspersky Endpoint Security
- Microsoft Intune
- ManageEngine Endpoint Central
These tools allow you to:
- Block USB devices selectively
- Allow only approved devices
- Log USB usage
- Apply policies remotely
This is ideal for managed IT environments.
Method 4: BIOS-Level USB Blocking (Advanced Security)
USB ports can also be disabled directly from the BIOS.
Steps (vary by manufacturer):
- Restart the PC
- Press F2, DEL, or F10 to enter BIOS
- Navigate to Advanced / Security / Peripheral Settings
- Disable USB Ports
- Save and exit
This blocks USB devices before Windows loads.
Best Practice Recommendation
For personal computers, Registry or Group Policy is sufficient.
For businesses, we strongly recommend endpoint security or MDM solutions for better control, reporting, and compliance.
Need Help Managing USB Security?
At Etuu Technologies, we help businesses:
- Control USB access
- Secure endpoints
- Implement IT security policies
- Manage devices remotely
