Learn What IT Pros Need to Know About Windows 11 - August 24th at 1 PM ET! Learn What IT Pros Need to Know About Windows 11 - August 24th at 1 PM ET!
Disk Management

How can I prevent users from writing to USB removable disks (USB flash drives)?

USB removable disks (also known as flash drives or “Disk on Key” and other variations) are quickly becoming an integral part of our electronic life, and now nearly everybody owns one device or another, in forms of small disks, external hard drives that come enclosed in cases, card readers, cameras, mobile phones, portable media players and more.

Portable USB flash drives are indeed very handy, but they can also be used to upload malicious code to your computer (either deliberately or by accident), or to copy confidential information from your computer and take it away.

Microsoft has introduced some changes into Windows XP Service Pack 2 that allow an administrator some control over how USB Removable Disks (or flash drives) are handled. A new storage device policy named WriteProtect makes it possible to prevent all removable USB drives from being written to. Users can still read from these devices, but are not longer able to write to them.

This tweak will only work in Windows XP SP2 and above.

Sponsored Content

Read the Best Personal and Business Tech without Ads

Staying updated on what is happening in the technology sector is important to your career and your personal life but ads can make reading news, distracting. With Thurrott Premium, you can enjoy the best coverage in tech without the annoying ads.

You can also Disable Writing to USB Disks with GPO.

Block writing to USB Removable Disks

To block your computer’s ability to use USB Removable Disks follow these steps:

  1. Open Registry Editor.
  2. In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies
  1. Create the following value (DWORD):

WriteProtect

and give it a value of 1.

Note: As always, before making changes to your registry you should always make sure you have a valid backup. In cases where you’re supposed to delete or modify keys or values from the registry it is possible to first export that key or value(s) to a .REG file before performing the changes.

  1. Close Registry Editor. You do not need to reboot the computer for changes to apply.

Users trying to write to any USB Removable Disk will now get an Access Denied message.

Enable writing to USB Removable Disks

To return to the default configuration and enable your computer’s ability to use USB Removable Disks follow these steps:

  1. Go to the registry path found above.
  1. Locate the following value:

WriteProtect

and give it a value of 0.

You can download a .REG file that configure this setting right HERE (1kb).

Further Reading

You may find these related articles of interest to you:

Links

Guy’s Windowmaker’s Blog

Related Topics:

BECOME A PETRI MEMBER:

Don't have a login but want to join the conversation? Sign up for a Petri Account

Register
Comments (2)

2 responses to “How can I prevent users from writing to USB removable disks (USB flash drives)?”

  1. Deni petri | Fotoimage

    [...] Disable Writing to USB Disks in XP SP2 – PetriUSB removable disks (also known as flash drives or Disk on Key and other variations) are quickly becoming an integral part of our electronic life, and now. [...]
  2. Removible disks | Zwemplezier

    [...] Disable Writing to USB Disks in XP SP2USB removable disks (also known as flash drives or Disk on Key and other variations) are quickly becoming an integral part of our electronic life, and now. [...]

Leave a Reply

Register for Advanced Microsoft 365 Day!

GET-IT: Advanced Microsoft 365 1-Day Virtual Conference - Live August 24th!

Join us on Tuesday, August 24th and hear from Microsoft MVPs and industry experts about how to take advantage of Microsoft 365 at a technical level and dive deep into the features and functionality that will make your environment more secure and compliant.

RSVP Now

Sponsored By