How To Disabling USB Removable Drives in Windows with Group Policy
How To Disabling USB Removable Drives in Windows with Group Policy
Disabling USB removable drives via Group Policy in Windows
can be an effective way to enhance security and prevent data leakage. Here's
how you can do it:
Note: Group Policy is only available in Windows Pro,
Enterprise, and Education editions. If you are using Windows Home edition, you
won't have access to Group Policy Editor.
1. Open Group Policy Editor:
- Press Win + R,
type `gpedit.msc`, and hit Enter.
2. Navigate to the USB Settings:
- In the Group
Policy Editor, navigate to `Computer Configuration -> Administrative
Templates -> System -> Removable Storage Access`.
3. Disable USB Removable Drives:
- Look for a policy
named "All Removable Storage classes: Deny all access" in the right
pane.
- Double-click on
this policy to open its settings window.
- Select the
"Enabled" option.
- Click Apply and
then OK.
4. Update Group Policy:
- Open Command
Prompt with administrative privileges by searching for "cmd" in the
Start menu, right-clicking on "Command Prompt," and selecting
"Run as administrator."
- In the Command
Prompt window, type `gpupdate /force` and press Enter. This will force an
immediate update of Group Policy.
After performing these steps, USB removable drives should be
disabled on your Windows system as per the Group Policy settings. Keep in mind
that users with administrative privileges can modify these settings, so it's
important to secure access to the Group Policy Editor to prevent unauthorized
changes.
Always remember to back up your system or registry before
making significant changes, especially if you're not familiar with Group Policy
settings, to avoid accidental misconfigurations.
Oky
ReplyDeleteGrate Help
ReplyDelete