Windows. how to disable the use of USB storage devices

If you have not installed a USB storage device on your computer, pair the user or component with the "deny" permission for the following files:
& Amp; #8226; % SystemRoot % infusbstor. PNF
& Amp; #8226; % SystemRoot % infusbstor. inf
In this way, you will not be able to install USB storage devices on your computer. To "deny" permissions on the user or component pair usbstor. PNF and usbstor. INF files, follow these steps:
1. Start Windows Resource Manager and find the % SystemRoot % INF folder.
2. Right-click the "usbstor. PNF" file and click "properties ".
3. Click the Security tab.
4. In the "Group or user name" list, click the user or group for which you want to set the "deny" permission.
5. In the "username or groupname permission" list, click to select the "deny" check box next to "full control", and then click "OK ".
Note: you also need to add the system account to the "deny" list.
6. Right-click the "usbstor. inf" file and click "properties ".
7. Click the Security tab.
8. In the "Group or user name" list, click the user or group for which you want to set the "deny" permission.
9. In the "username or groupname permission" list, click to select the "deny" check box next to "full control", and then click "OK ".

If a USB storage device is installed on your computer
Warning improper use of Registry Editor or other methods may cause serious problems. These problems may require you to reinstall the operating system. Microsoft cannot guarantee that you can resolve these problems. You are at your own risk to modify the registry. If a USB storage device has been installed on your computer, set the "Start" value in the following registry key to 4:

Hkey_local_machinesystemcurrentcontrolsetservicesusbstor
In this way, when a user connects a USB storage device to a computer, the device cannot run. To set the "Start" value, follow these steps:
1. Click start and then click Run ".
2. In the open box, type regedit and click OK ".
3. Find and click the following registry key:

Hkey_local_machinesystemcurrentcontrolsetservicesusbstor
4. In the right pane, double-click Start ".
5. In the value data box, type 4, click hexadecimal (if not selected), and then click OK ".
6. Exit the Registry Editor.