Skip to main content


Disable Access To USB Devices


Nowadays, USB devices such as a flash drive, external hard disk, USB keyboard etc are used almost on a daily basis. It's definitely the case with myself, namely performing backups to my external HDD. Whilst they serve their purpose well for legit reasons, anyone with malicious Intent who has physical access to your PC, can Inject a payload by simply plugging In the device. In this tutorial, I will demonstrate how to prevent access to all USB ports on your computer, thus any USB device that's plugged In, will not function.




To achieve this, I will be using the Group Policy Editor, which Is native to Windows 10 Pro, Enterprise and Education editions. If you do not have either of these Installed, upgrade your OS at your earliest convenience.

Essentially, after applying this setting, any USB device that's plugged Into your PC, will be rejected by the operating system. Pretty cool, yes? So let's see how this Is done with the following guide.

Step One:
To access the Group Policy Editor, open the Run menu, enter "gpedit.msc" (no quotes) and hit OK.



Step Two:
Next, navigate to the following directory:
"Computer Configuration > Administrative Templates > System > Removable Storage Access".

Then on the right pane, double-click:
"Removable Disks: Deny read access".




Step Three:
On the left of the window, click the "Enabled" radio button and to finalize the process, simply hit "OK".



Last Step:
Now to put this to the test. Here's what happened when I plugged In my USB flash drive and attempted to open It. As you can see, access Is denied.



Final Thoughts:
To reverse the change, go back to Step Three above, and select the "Not Configured" radio button. The good thing about this tweak, Is that It's very easy to apply and unlike the Windows Registry, a reboot Is not required for changes to take effect.

Be careful though- If you have a USB mouse whilst applying the tweak and for one reason or another, solely rely on that to perform your tasks, It'll disable It's functionality altogether. And If that's your only means to navigate on your PC by way of clicking files, folders, options and settings, well, you'll be locked out of performing such tasks!



Comments

Popular posts from this blog

Check The Health Of Your Laptop's Battery

When you first purchase your laptop and fully charge the battery thereafter, It runs at It's optimal state for quite a while. However, over time, It Inevitably decreases In performance, and does not hold It's charge capacity as per It's brand new state. This Is due to wear & tear, and a few other factors. It's very Important to know the condition of your battery, so In this tutorial, I will show you how to view the current status and health of your laptop's battery.

How To Troubleshoot Your PC's Power Settings

Upon purchasing your computer with the Windows OS Installed, by default, It's power plan setting Is set to Balanced. Depending on the manufacturer, the hibernate and sleep modes are also configured to turn off at certain Intervals. You can also create a plan of your own, based on your computing usability. Power plan settings can corrupt at the best of times, hence In this tutorial, I will show you how to troubleshoot your PC's power settings natively within Windows.

Force Windows 10 To Boot To Advanced Startup

In the event your operating system corrupts and losses functionality to some degree, Windows 10 has the Advanced Startup Options menu, that contains a range of diagnostic and repair utilities to help restore the OS back to It's functional state. You can perform a System Restore, Reset your PC, execute commands via the Command Prompt and more. To have It readily available, In this tutorial, I will show you how to force Windows 10 to always boot to the Advanced Startup settings.