8/23/09

Disable USB devices on a Network

Interesting to know how many users in a company can infect a network by attaching a USB device. The risk has been out for a while and even though you can apply this fix. It still doesn't guarantee that it will work all the time.

with Compliments to www.howtodothings.com


Click Start Menu > go to run command and type "regedit" without quotes. Registry Editor will open.
Expand the HKEY_LOCAL_MACHINE folder then SYSTEM >CURRENT CONTROLL SET > SERVICES >USBstor, located at the left pane.
Find "Start" in the right pane with the blue icon.
Double click "Start". A box titled "Edit DWORD value" will open.
Write down "4" in the "Value Data" Field. Illustration 1.1
Click OK and then close the Registry Editor.

Your USB flash drive is now disabled. Whenever you insert a flash drive, Windows won't detect it and will not open it.

To enable it again, repeat steps 1 through 4 and then change the value to 3. The default value for enabling a USB flash drive is 3.

Note: Performing this trick will only Disable USB Mass Storage devices and will not affect other USB Devices such as USB Keyboard, USB Mouse, Scanner, Printer etc....always backup your registry to prevent losing your valuable data.