Forcefully disable USB ports on your computer. Disabling USB ports on your computer

The USB interface is used everywhere to connect equipment, transfer data and charge devices. But sometimes users have a question about how to disable USB on a computer in order to protect data from copying or prevent the system from becoming infected with viruses.

BIOS Settings

You can disable ports directly in the BIOS. To do this, you need to restart the computer and, when turning it on, press the F2 key until it boots basic system I/O Here you need to find items related to USB operation: For example, Legacy USB Support.

Deactivate the parameters by moving their value to the “Disabled” position. To save your changes, press F10 and then Y.

Windows Tools

Windows OS provides users with a whole series USB port management tools. Let's consider several options for disabling all ports or only individual connectors.

If you can't figure out which BIOS settings need to be turned off, then use it to turn off USB manager devices. Here you can disable both all connectors and individual ports.

You can turn off all ports or only some connectors to which flash drives or other external drives are connected. Alternatively, you can completely remove hardware drivers, but this method does not always work. When connected USB devices the system will detect what you need software no, and will begin installing it on its own.

If you are not afraid to work with the registry editor, then use it to deactivate all USB ports.

If you need to turn USB back on, go to the specified registry branch again through the editor and change the value of the “Start” parameter from “4” to “3”.

In some Windows versions(Ultimate, Professional) can be used to disable the editor group policies.

As you can see, this parameter is responsible specifically for prohibiting data recording. Simply put, the ports will work, but you won’t be able to write anything to external drives.

If Windows tools seem inconvenient to use, then use it to disable USB program Ports Disabler, which with one click disables the USBSTOR service, which is responsible for the operation of all USB ports on the computer. The program disables only ports intended for external drives (flash drives, hard drives), whereas the same adapter wireless mouse continues to work quietly.

After disabling the ports, none external storage will not be detected on the computer. If you need to turn the connectors back on, click the “Enable USB” button in the program.

Physical shutdown

To prevent the ports from working, you need to turn off their power. Those connectors that are on the rear panel system unit, it will be difficult to disconnect from the motherboard.

If you need to turn off USB on the front panel of the system unit, it is easier to disconnect the wires.

This method does not completely block access to USB interface, since the ports at the back will continue to work, but at least it will discourage users from inserting flash drives into the slots at the front, as a result of which the media are often broken due to careless handling.

There are no similar articles.

Very often on flash drives and external hard disks may contain malware. This problem is especially relevant in cases where you have to deal with many strangers(customers, for example). In today's article we will talk about how to manage USB ports, blocking and unlocking them if necessary.

People often ask: “Is there some kind of program with which I can limit access to the USB ports of my laptop for “unnecessary” people?”

We answer: “Yes, there is such a program and it’s called Microsoft Windows! In fact, everything is not so complicated, because you can control whether USB ports are enabled or disabled by editing the registry. And, of course, since only the administrator can correct the registry, “guests” will not be able to activate disabled ports without your permission.

Before we tell you the specific recipe, let us remind you that manipulating the Windows registry is an important change. If your computer or laptop breaks down, we recommend that you seek repairs at srochnyi-remont.ru. The company’s specialists will advise and help quickly resolve the problem.

Blocking and Unblocking USB Ports

If you often work in the registry, then the necessary key is located at: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR. Find the key called Start and change the value to 4 if you want to disable USB support. Do you want to turn it back on? Then install 3 again.

Want to make it easier? Then just open empty file Notepad and paste the following contents there:

Windows Registry Editor Version 5.00

”Start”=dword:00000004

”Count”=dword:00000000
”NextInstance”=dword:00000000

It will look something like this:

Now save this file by selecting the type " All files" and specifying a clear name, for example, "USB-Off.reg". You have a “switch” ready and all you have to do is make an antagonist for it.

To do this, repeat everything from the beginning, but in the line

”Start”=dword:00000004

replace 4 on 3 . And then save the file, but under the opposite name, for example, “USB-On.reg”.

Now, by running the first file, you will disable the USB ports, and using the second one, you will resume their functioning.

It is recommended to disable USB ports as a precaution, namely when connecting flash drives, external drives or other USB devices with the aim of infecting your computer with all kinds of viruses or stealing data. It is for these reasons that many IT workers in offices and companies block access to them. Without bothering with any programs for these purposes or other settings, they simply disconnect it from the motherboard.

Below I will give some examples with descriptions, how to disable USB ports on a computer.

Disable USB in Bios

We go into Bios, to do this, when turning on or restarting the PC, click Delete key on the keyboard. Go to the Advanced section ( Advanced BIOS features), where we are interested in the next option Legacy USB Support. By default, it has the Enabled position, change it to Disabled.

Save the changed values ​​by pressing the F10 hotkey and exit.

Via the registry

Using +R, open the Run window and enter the Windows command “regedit” (without quotes). In the editor we go along the branch

Microsoft Registry

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

Find the DWORD parameter “Start” and change its value to “4”.

We reboot by first clicking the “OK” button.

PS: How to enable USB ports? Change the value back to "3".

device Manager

Open the Start menu right click Click on “Computer” and go to “Properties”. On the left side of the screen, click on the “Device Manager” link. In the displayed list, look for the item “ USB controllers"Open it and use the mouse to deactivate it.

Going to "Properties".

Then “Drivers” and then click the button shown in the screenshot below.

Removing USB controller drivers

An option that also has a place to be. Simply use a program, for example, CCleaner, to remove drivers from your computer. Downside is that when you restart the PC it will check for the presence of these and install them. Which will again open up access to the ports.

Fix It utility

You can download and at the same time find out how you can use it to deny access by following this link //support.microsoft.com/ru-ru/kb/823732.

Using programs

There are quite a lot of applications, it’s impossible to list them all, but I would like to use one. Its name is USB Ports Disabler. Download from the link. We launch and then everything is intuitive.

First, click the button highlighted in the figure below

If the USB ports on your PC are not working and Windows settings and driver updates do not help, perhaps the controller was disabled in the BIOS. In this case, you will need to go to the configuration menu and turn everything back on.

There are many different versions BIOS with its own interfaces and subtleties of operation. Also, a more modern complex can work on your computer - UEFI, which supports a full GUI interface. This article discusses the distributions that are most often installed on motherboards.

Entering BIOS settings

To start changing the configuration, you need to go to the corresponding menu. It can be opened during power on personal computer- before it started Windows boot from the hard drive.

Turn on your PC. In case it is already running: reboot. Wait sound signal speaker: a short single beep indicates that everything is internal components, necessary for the computer to operate, have been detected.

Now you need to click hotkey to call the configuration. This must be done before changing the screen. If you don't have time and Windows starts loading, reboot. The keys depend on the installed motherboard model and version BIOS firmware. You can find it in the user manual that came with the motherboard, on the manufacturer’s official website, or view on your PC screen when loading it:

If you don't know the board model, it's okay. Just try pressing next keys: Tab, Delete, Esc, F1, F2, F8, F10, F11, F12. One of them will definitely do.

You don't have to try just 1 option at a time. You can quickly press all the buttons from the list without any problems. One of them will come up and launch the BIOS settings, and the rest will be ignored.

Entering the BIOS/UEFI settings of the latest PCs

Many modern computers boot up so quickly that you won't be able to access the keystrokes when you turn them on. This is also true for laptops. That's why latest versions Windows OS has acquired new feature launch. Let's show it using Windows 8.1 as an example.

Your computer or laptop will reboot into setup mode. After restarting your PC, you will also be able to select option to run from a USB drive or DVD.

Menu navigation

Almost all BIOS versions are devoid of GUI. This means that you will have to work only using the keyboard, as in, for example, Windows console. Navigation is carried out using the up-down and right-left arrows. To open any section, use the Enter key to go back - “Escape”. A small reminder of the keys used is always shown on the screen.

Firmware complex UEFI installed on the most expensive and powerful motherboards. He supports more drivers and can use a mouse. Its interface will be familiar Windows users and other modern operating systems.

Each version has its own interface and sets of options. Even the names of the same parameters may differ. The following article describes several popular BIOS releases.

AMI BIOS

A very common option that can be found on many modern computers. The main menu is divided into 2 parts: a list of categories and various actions, like exit or save. You will be working on the left side.

You need to go to the section called “ Integrated Peripherals». Russian version There is no interface, so all commands are only in English. Use the Down arrow to highlight this item and press Enter.

Here you need to enable ( Enabled) 4 options:

• USB EHCI controller– main controller. If on motherboard there are ports of version 3.0, this item will be divided into 2 parts: “Controller” and “Controller 2.0”;
• USB Keyboard Support– keyboard support;
• USB Mouse Support– mouse support;
• – work with external data storage: flash drives, disk drives, disks of smartphones and digital cameras.

In some older versions there are only 2 points " USB controller" And " Legacy USB storage support».

When you're done with the settings, press F10 to save changes made and restart your computer.

Phoenix AwardBIOS

Another popular version that can often be found on modern laptops. Doesn't have home page, like AMI, but with convenient thematic tabs at the top. You can move between sections using the left and right arrows, and between items using the up and down arrows.

Go to the section " Advanced» using the Right arrow. In it, find the category “ USB configuration" All items in this section must be moved to the position “ Enabled" In some versions the category " USB configuration" may be located in the " tab Peripherals" and not in "Advanced".

To exit the menu, press F10 and confirm exit.

AMI BIOS for Asus

AMI version used on Asus laptops. Externally it is very similar to Phoenix - a similar bookmarks bar. Settings USB are in the section " Advanced" Go there, enable all options and exit using the F10 button.

UEFI

Contrary to popular belief, UEFI is not part of the BIOS. It can rather be called a more advanced, but less popular competitor. Exists large number different versions, each with its own interfaces. However, here the controls are similar to familiar Windows, so you can easily find the options you need.

Windows Settings

If at the BIOS level all ports and controllers are enabled, but the USB ports still do not work, there may be a problem in the settings of your Windows system.

First, just try disconnect and reconnect the device. This will check if the drivers are correct. If there's something wrong with them, Windows will try to reinstall them.

If nothing happens when you reconnect, try turn on the controller V Windows registry. To do this you need to do the following:

Video: how to configure any BIOS to boot from a USB flash drive

Sandbox

Quickly and easily disable USB ports on Win7 part 2

In the previous article I wrote how inexperienced user disable USB ports using group policies. However, I forgot that different versions OS Windows 7 contains various features.
Please note that I am not talking about installing an additional free software, because I know from experience that closing a hole with free software risks opening five more. I suggest using the built-in OS features.

I know from experience that to save money, small companies install such versions “ Home Basic" or " Home Premium"on staff cars (well, this is only installed if the company is trying to work legally and does not want a fine for illegal software. And those companies that are not afraid of inspections install all pirated software and do not suffer))).
And on the “Home Basic” and “Home Premium” versions there are no accessories inherent to their older brothers. And closing ports using group policies will not work. Therefore, we need to block access directly to the executive files that initiate the initialization of devices connected to USB ports.

Let's say that there are 3 users on the machine, “Operator”, “Manager” and “Administrator” in the Administrators and Users groups
It is necessary to make sure that the flash drive can only be used by a user under the “Administrator” account.

Turn on the computer, log in as an administrator, open Explorer and write "%SystemRoot%\inf\"(hereinafter in the text copy without quotes).

Next in the search we write “USB”

Will output approximately 18 elements. (depends on what system is installed, OS version, installed additional drivers for USB)
We essentially only need 8 files.
usb.inf
usbstor.inf
usbport.inf
winusb.inf
usb.PNF
usbstor.PNF
usbport.PNF
winusb.PNF

Then we need to block access to these files to other users. Right click on the file "usbstor.inf" -> "properties"

Go to the tab "safety", and press the button "change"

Then we select the users we need to disable. For us these are “Operator”, “Manager” and “System”. If we need to disable all accounts that belong to the “Users” group (these are “Operator” and “Manager”), then we simply ban the group. If only a specific one, let’s say “Operator”, then select this particular account.

Attention account“System” also needs to set a ban on using the file.
Then we set a ban on use, switch to another user and also set bans. When required users will be disabled (for me it is only “system” and “users”)

click the “Ok” button

There will be a warning that this will lead to the fact that access to the file will be unavailable and all that (if you want, you can read it), click the “Ok” button again.
Again we read the message about whether we really want to do this (you can read it if you wish), and press the “Ok” button again.

And we repeat this procedure for the next 7 files.
usb.inf
usbport.inf
winusb.inf
usb.PNF
usbstor.PNF
usbport.PNF
winusb.PNF

If this is only an installed OS, then everything is in order and, in theory, access to the flash drive will not be available to selected users. However, if flash drives were already connected to this system by those users who needed to disable access to flash drives, then you will need to change the key in the registry.

Click start -> write regedit -> open the registry

Open the folder “USBSTOR”
and change the value of the “Start” parameter to 4

Tags: disable, USB ports, flash drive