How to Block Installation of New USB Storage Devices

A USB flash drive is a portable media storage device that can be plugged into an available USB port on your computer. You can then transfer files onto the flash drive and take the files with you. Portable media may pose a security risk for some network administrators. If you're looking to tighten network security, you can block the installation of portable USB flash drives on any computer by using the Group Policy Management Editor window.

Instructions

1. Click the "Start" menu button. Type "mmc gpedit.msc" into the Search field and press the "ENTER" key.

2. Double-click "Computer Configuration" in the left pane, then double-click "Administrative Templates."

3. Double-click "Device Installation." Double-click "Device Installation Restrictions."

4. Right-click on "Prevent installation of removable device" and choose "Properties".

5. Select "Enabled," then click the "Apply" button. Click "OK."

6. Close the "Group Policy Management" window and any other open windows or programs. Restart the computer.

7. Test the new system settings by inserting a USB flash drive into an available USB port in the computer. Instead of the "Installing Device Driver Software" message, a "Device installation was prevented by policy" message will display.

References

• FedTech: Windows 7: Securing Removable Drives
• MicrosoftTechNet: Device Management and Installation Step-by-Step Guide: Controlling Device Driver Installation and Usage with Group Policy