XP SP2: Block Access to USB Storage Devices
Contributed by MickeyMouse 
Tagged: Windows SP2 now allows an administrator to prevent USB storage devices from attaching to the system. In some situations this should increase the security when somebody has direct access to a box.
This has been updated here:
How To Prevent Windows XP Users From Writing To USB Drives
Systems by default will allow USB storage devices to connect without problems. This allows an easy pathway for a user to download or upload large files from the system. In some environments, this is helpful; other times it can be a security nightmare.
Here’s the registry key to turn it off.
(If you don’t know registry, don’t mess with this stuff.)
If you don’t have this key, you might need to create it.
- Location:
HKEY_LOCAL_MACHINE\System\
CurrentControlSet\Control\StorageDevicePolicies
Setting name:
WriteProtect
Dword values:
0 (is the default and allows USB devices to connect)
1 (prevents USB devices from connecting)
You may also like -
XP SP2: Bluetooth-enabled mice, keyboards, and other devices no longer work
XP SP2: Registry Hack and Download To Prevent a System From Installing SP2
Windows XP and SP2 and AMD 64 Processors and Problems: FYI
XP SP2: Have SP2 Shipped to You on a CD for FreeXP SP2 Install Error: Atapi.sys is in Use by Another Program or Application
Windows XP and SP2: Slipstreaming SP2 into your Windows XP Setup Files
What is the cloud? What are the benefits of the cloud?
XP SP2: Lock up or Will Not Boot after SP2 Install on Prescott
puloy said on November 24, 2008
I find this reg key very usefull…
Jack said on July 9, 2009
Our office has around 20 computers. We use a product called AccessPatrol to control the access of USB and other external devices on our computers.
It works like a charm. I downloaded it from http://www.AccessPatrol.com
Anonymous said on October 19, 2009
Thank you..!
Anonymous said on October 19, 2009
Nice…
Anonymous said on April 27, 2010
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesusbstor
go to property and remove SYSTEM user from permission tab.
you can do this from domain policy…add resistry in resitry and edit permission
Awan Kritink said on November 24, 2010
How if just administrator can access the device (usb)?
and if I use my profile, the device not appear in my win.explorer (sign into the right below appear), i look into the device manager is disable, when i enable it, not work or back again to disable..
can you give me the solution??