Update 1/18/2007 09:23 PM EST – Some changes in windows have made this article out of date. Check out our new article on the subject to learn how to disable USB flash drives

Once in a while I have a friend, or customer that needs to keep people from using the USB ports to copy data off of a system.

It is easy to lock a machine down, disable the floppy, and cdrom in the bios. Many times when you try to disable USB – it disables it entirely.

This can be a real pain on newer laptops or systems that don’t even have a PS2 interface for the mouse or keyboard.

There is a simple registry change that will keep the USB storage drivers from starting when the system boots. Keeps people from walking up to a PC and copying data off with a USB key, but allows you to keep your scanner, keyboard, and mouse working.

As always – back your system up before messing around in the registry.

Just open regedit and browse to this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor

Notice the value ‘Start’

Switch this value to 4, and USB storage devices are disabled.

Switch this value to 3, and USB storage devices are enabled.

For those of you that don’t feel like messing around in the registry -

We wrote a program to do it for you

Download from here