Windows 10: Block USB storage?

Hi,
Is there any software that can help me block USB storage on PC but not the mouse and WiFi adapter connected?

Also, is there a way that I can get notified in any ways when someone connects a pen drive or phone to the PC?

:)

 

HKLM\System\CurrentControlSet\Services\UsbStor\Start=4 doesn't work on external SSD?

To block USB Storage I have set the regkey HKLM\System\CurrentControlSet\Services\UsbStor\Start=4

This blocks USB drives, and it works well on all USB Pen Drives.

However, recently I bought a Samsung T3 external SSD, and when I connect it to USB, I can see the disk and read/write it (ie it is not blocked).

What is the matter, is that by design?

 

PROLIFIC USB-TO-SERIAL COMM PORT WINDOWS 10

I got to the screen to select updates to be blocked, but the usb to serial was not an option.

It did list a bunch of things that I could block.

I prefer not to block all updates.

Stan

 

Hello lolcocks, *Smile

You might see if the tutorial below may work for you for this. It disables the usage of USB storage devices.

USB Storage Device - Enable or Disable Connecting - Windows 7 Help Forums

 

Thank you but people can still change this on their own and get access.

So to be confirm with this is there a way I can be notified in any ways when someone connects a USB to one of my PCs?
Like I get an email or any other kind of notification as soon as someone connects a pen drive to one of my PCs.
Literally any kind of notification.

All these PCs are connected to a single WiFi network, including mine.

 

Austin ISD has something like that called LanSchool. It's very expensive. You might ask a totally business-oriented computer place for recommendations for a small network.

 

If they are administrators, then yeah they could enable it again. If they were standard users, they wouldn't be able to.

I'm afraid that I don't know about getting a notification other than something like Roland posted above.

 

Isn't there any system log that he can find out if a USB was connected during he was absent? By the computer's location he could find out who did it and take measures. Or he could try disabling any USB root hub not currently used from Device Manager. The only way to use a USB Flash drive then would be to disconnect a working device. This is not too easy to guess for an average user, plus he would think twice before disconnecting another device to connect the Flash drive. In any case make other users simple, not Administrators, so they cannot undo any changes you do to block access. What about disabling the plug'n'play service? I haven't tried, but in theory this way the computer would be unable to detect and install any new device.

 

Got anything cheaper? *Sad

They are all administrator accounts. How do I make them all standard? I should not be able to lose any installed applications. Mostly my AutoDesk software suite.

How to disable the plug-n-play service?

 

Warning: Haven't tested and don't know if you have any problems doing that, but to disable the plug'n'play service right-click on This PC and select Manage to open Computer Management. Click on Services and applications, expand Services and find Plug and Play. Right-click on that and select Properties. Change Startup type to Disabled.

To change a user from Administrator to standard, click on search icon and type Users. Select Edit local users and groups and then Add, edit or remove users. There you can select the user and change its account type to User, or whatever is called. I have no other users in my PC, so I cannot see the exact steps to guide you.

 

The tutorial below can help show you how to change them to be standard users.

Do note that as standard users, they will not be able to do anything that requires elevated rights. You should have an administrator account on each PC so that you will be able to though.

https://www.tenforums.com/tutorials/6...dows-10-a.html

 

About the Plug and Play service, I read somewhere that it cannot be disabled and is best left at manual as changing it could cause problems. So you have to find another way to block USB devices. What about disabling all the unused USB ports? Some BIOS allow disabling individual USB ports, or you could disable the respective USB root hub device in Device Manager. I'm sure there must be some Group Policy to block access to external storage, but I'm not familiar with the Group Policy settings. Anyone else?

 

Try this: Download USB Disabler - MajorGeeks

 

Another great tool to add at my utility collection! Thank you!

 

Thanks for all your help guys, but all I want it to be notified in any way when someone connects a pen drive to any of my PCs. That's all.

Anyone knows how to do that?