Scribd
Upload
69 views1 page

How Can I Prevent Users From Connecting To A USB Storage Device?

This document provides two methods to prevent users from connecting USB storage devices on Windows XP, Server 2003, and 2000. The first method is to deny permissions to the Usbstor.pnf and Usbstor.inf files for the user and SYSTEM account, which prevents installing new USB devices. The second method is to disable USB mass storage in the device manager to block existing USB drives.

Uploaded by

Ar Rupam Khunger
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
69 views1 page

How Can I Prevent Users From Connecting To A USB Storage Device?

This document provides two methods to prevent users from connecting USB storage devices on Windows XP, Server 2003, and 2000. The first method is to deny permissions to the Usbstor.pnf and Usbstor.inf files for the user and SYSTEM account, which prevents installing new USB devices. The second method is to disable USB mass storage in the device manager to block existing USB drives.

Uploaded by

Ar Rupam Khunger
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 1

How can I prevent users from connecting to a USB storage device? http://support.microsoft.

com/kb/823732

Article ID: 823732 - Last Review: September 23, 2011 - Revision: 7.0
How can I prevent users from connecting to a USB storage device?

To continue receiving security updates for Windows, make sure you're running
Windows XP with Service Pack 3 (SP3). For more information, refer to this Microsoft
web page: Support is ending for some versions of Windows (http://windows.microsoft.com
/en-us/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs)

Problem description

Assume that you want to prevent users from connecting to a USB storage
device that is connected to a computer that is running Windows XP,
Windows Server 2003, or Windows 2000. This article discusses two
methods that you can use to do this.

Resolution

To prevent users from connecting to USB storage devices, use one or


more of the following procedures, as appropriate for your situation.

If a USB storage device is not already installed on the computer


If a USB storage device is not already installed on the computer, assign
the user or the group and the local SYSTEM account Deny permissions to
the following files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

When you do this, users cannot install a USB storage device on the
computer. To assign a user or group Deny permissions to the Usbstor.pnf
and Usbstor.inf files, follow these steps:

1. Start Windows Explorer, and then locate the %SystemRoot%\Inf


folder.
2. Right-click the Usbstor.pnf file, and then click Properties.
3. Click the Security tab.
4. In the Group or user names list, add the user or group that you
want to set Deny permissions for.
5. In the Permissions for UserName or GroupName list, click to
select the Deny check box next to Full Control.

Note Also add the System account to the Deny list.


6. In the Group or user names list, select the SYSTEM account.
7. In the Permissions for UserName or GroupName list, click to
select the Deny check box next to Full Control, and then click OK.
8. Right-click the Usbstor.inf file, and then click Properties.

1 of 1 2/11/2012 1:48 PM

You might also like