XP SP2: Block Access to USB Storage Devices

Posted August 27, 2004 by MickeyMouse in Windows

SP2 now allows an administrator to prevent USB storage devices from attaching to the system. In some situations, this should increase security when somebody has direct access to a box.


This tutorial has been updated here:

How to Prevent Windows XP Users from Writing to USB Drives

Systems, by default, will allow USB storage devices to connect without problems. This allows an easy pathway for a user to download or upload large files from the system. In some environments, this is helpful; other times it can be a security nightmare.

Here is the registry key to turn it off.

(If you do not know registry, do not attempt to modify it.)

If you do not have this key, you might need to create it.

    Location:
    HKEY_LOCAL_MACHINE\System\
    CurrentControlSet\Control\StorageDevicePolicies

    Setting name:
    WriteProtect

    Dword values:
    0 (This is the default and allows USB devices to connect.)
    1 (This value prevents USB devices from connecting.)

The Conversation

Follow the reactions below and share your own thoughts.