How to disable USB drives on Windows 11 and Windows 10. Blocking USB access is essential for protecting your device against malware, data theft, and hardware risks. In this video, we'll go over how to effectively disable USB drives on windows. Before we begin, be sure to subscribe to Ninja One's IT Video Hub for more tech content like this using Windows Registry Editor. Before We begin, we advise creating a full backup before making any system changes. The first method is through that Windows Registry Editor open the registry editor. Then navigate to edit the start registry key value in the U-S-B-S-T-O-R path to four. To re-enable USB storage, change the value back to three. When the value is set to four, an error will appear in the USB device manager entry using Windows Group policy editor. You can also use group policy to disable USB drive access on a single machine or a Windows domain using active directory. Open the group policy editor and go to computer configuration administrative template system removable storage access. In the right panel, select removable discs. Deny execute access check enabled to disable removable USB storage. If you wanna deploy this policy to multiple machines, run gpmc dot SMC on a domain controller using the device manager. The device manager can block USB access on a single computer open device manager and expand the universal serial bus controller's tree menu item. From there right click and disable USB ports as required. Understanding USB drive risks limiting USB drives reduces security risks. If an employee loses an unprotected USB stick sensitive data could be stolen. Removable drives also make it easy to accidentally lose or corrupt important files. Plus, USB devices can spread malware either through infected files or even planted lost drives that attack when opened. Use cases and impacts of disabling USB drives. Although some security tools allow white listing approved USB devices, these can still spread malware when used on unmanaged systems. A more secure approach is implementing monitored cloud storage or network shares, enabling safe file access both in the office and remotely. Manually securing more than a few devices often leads to dangerous misconfigurations, especially against USB threats. For more information, check out our official blog post on how to disable USB drives linked in the description below.