XP SP2: Block Access to USB Storage Devices

Tagged: Windows

SP2 now allows an administrator to prevent USB storage devices from attaching to the system. In some situations this should increase the security when somebody has direct access to a box.

This has been updated here:

How To Prevent Windows XP Users From Writing To USB Drives

Systems by default will allow USB storage devices to connect without problems. This allows an easy pathway for a user to download or upload large files from the system. In some environments, this is helpful; other times it can be a security nightmare.

Here’s the registry key to turn it off.

(If you don’t know registry, don’t mess with this stuff.)

If you don’t have this key, you might need to create it.

Location:
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Control\StorageDevicePolicies

Setting name:
WriteProtect

Dword values:
0 (is the default and allows USB devices to connect)
1 (prevents USB devices from connecting)