Restrict access to the USB storage devices

The ability to use USB stick and HDD makes it easy to transfer files from one computer to another. By default it is possible for any user to attach such an USB storage device and start transfering data.

Restrict access for installing new USB storage devices by changing the permissions of these files:

%SystemRoot%\Inf\Usbstor.pnf
%SystemRoot%\Inf\Usbstor.inf

Restrict access to any USB storage device (also existing) for any user by disabling the driver:

[HKEY_LOCAL_MACHINE \System \CurrentControlSet \Services \UsbStor]
Start = 4

More Info MS KB823732

Restrict write access to any USB storage device for any user (WinXP SP2+):

[HKEY_LOCAL_MACHINE \System \CurrentControlSet \Control \StorageDevicePolicies]
WriteProtect = 1

More Info Changes to Functionality in Microsoft Windows XP Service Pack 2