How to Prevent Users from Connecting to a USB Storage Device by Group Policy

To prevent users from connecting to USB storage devices by group policy

 If a USB storage device is already installed on the computer:

1.  Click Start –  All programs  – Administrative Tools – Group Policy Management.
2. Create or Edit Group Policy Objects
3. Expand Computer Configuration – Preferences – Windows Settings.
4. Right click Registry – New – Registry Item.
5. General Tab.

• Action : Update
• Hive : HKEY_LOCAL_MACHINE
• Key path : SYSTEM\CurrentControlSet\Services\UsbStor
• Value name : Start
• Value type : REG_DWORD
• Value data : 00000004

Notes: You can apply this method on User Configration too.

If a USB storage device is not already installed on the computer:

1. Click Start –  All programs  – Administrative Tools – Group Policy Managment.
2. Create or Edit Group Policy Objects
3. Expand Computer Configuration – Police – Windows Settings – Security Settings .
4. Right click File System– Add file or folder.
5. Browse to this file

• %SystemRoot%\Inf\Usbstor.pnf
• assign the user or the group and the local SYSTEM account Deny permissions.

6. Browse to this file too.

• %SystemRoot%\Inf\Usbstor.inf
• assign the user or the group and the local SYSTEM account Deny permissions.