How to Block USB Devices in Windows 11: 5 Easy Steps 🚫💻
If you don't want to use USB devices or USB storage devices, you can block the USB ports on your computer. In Windows 11, you can do this using a graphical method or via the command line. 🚫💻
Why block USB devices?
There are many reasons to block USB devices in Windows 11. It is possible (and quite common) that it is delivered malware via a USB device. In addition, blocking USB devices also helps prevent data transfers (such as someone trying to copy files to or from your machine). A good example of a specialized USB tool designed to steal data is the USB Rubber Ducky. 💼🔒
If you do not use devices USB ports with your machine, it makes sense to keep the ports disabled, as this prevents other users from also being able to use these ports on your computer. You can unlock any USB port you want on your computer. 🔑
Block all USB devices using Device Manager
If you want to disable all USB ports so that no USB devices work on your system, use the tool Device Manager. Note that this method also disables any mouse or USB-enabled keyboard. Just keep in mind that this could be a problem if you don't have an alternative way to control your PC set up. ⚠️
To start, I opened the Windows Search (pressing Windows+S), I typed Device Manager and opened the utility. Expand the “Universal Bus Controllers” section, right-click on a USB port from the list and choose “Deactivate device.” Select “Yes” on the prompt. ✅
If you do not find the “Disable device” option for a USB port, you will need to disable that port using the BIOS, as explained below in this guide. 🔧
Repeat the previous step until you have disabled all the ports on the list.
From now on, when you connect a device to any USB port on your machine, your system will not connect to that device. In the future, you can re-enable your USB ports by opening Device Manager, expanding "Universal Bus Controllers," and clicking right on each port in the list and choosing “Enable Device.
Block USB storage devices from PowerShell
If you prefer command line methods, you can use a cmdlet in PowerShell to block all USB storage devices on your PC. Please note that other devices such as keyboards and mice will continue to work. 🔒🖱️
Don't forget to restart your computer after running the command. 🔙
Block USB storage devices using the Local Group Policy Editor
If you are using the Pro edition of Windows 11You can use the Local Group Policy Editor to block USB storage devices. Note that this tool isn't available in the Home edition of Windows 11. 🛠️
To use it, open the Run dialog box by pressing Windows+R. Type the following in the box and select “OK” or press Enter:
gpedit.msc
In the Local Group Policy Editor window, using the options on the left, navigate to the following path. In the right pane, double-click the item that says “All removable storage classes: Deny all access.”
In the opened window, at the top, select the “Enabled” option. Then, at the bottom, choose “Apply” and then “OK”. 🎉
Close the Local Group Policy Editor and restart your PC. 🔁
In the future, to unblock USB storage devices, double-click the “All removable storage classes: Deny all access” entry, select “Not configured,” then “Apply” followed by “OK.” Make sure to restart your computer afterwards. 🔄
In the right pane, double-click on the item that says “Startup.” In the opened window, click on the “Value data” field and type 4. Then select “OK”. The value 4 tells you to Windows not recognizing any USB storage devices. 🛑
Close the Registry Editor and restart your PC for the changes to take effect. 🔄💻
To revert your change and unlock the devices USB storage in the future, navigate to the above-mentioned path in the Registry Editor, double-click the "Start" entry, type 3 In the “Value data” field, select “OK,” and restart your PC. 🔄
If you can't disable the USB ports using other methods, use the BIOS
If you don't see the option to disable USB ports in Device Manager, use the menu BIOS setup on your PC to disable those ports. To do this, open Settings, select System > Recovery, click “Restart now” next to Advanced Start, and I chose “Restart Now” from the prompt. 🔄
On the Choose an option page, select Troubleshoot > Advanced options > Troubleshooting settings. UEFI firmware and click “Reboot.” Each BIOS menu is different, but you will find an option labeled USB or something similar. In my Asus laptop, I will go to the “Advanced” tab, choose “USB Settings” and then disable the ports. ⚙️
When you want to use the ports again, you will have to enable them from the BIOS (since you disabled them from the BIOS). 🔄
And this is how you can prevent USB devices from interacting with your Windows 11 computer. If you are worried. 📸🔒
