Group Policy Editor Windows 7 – USB Devices Disabled

In certain circumstances, the system administrator or Information Technology ( IT ) officials will need to limit access to removable devices for each computer in the organization primarily due to security. By limiting the USB port we can avoid the virus does not spread from USB thumb drive. Most important, we also can make sure that unauthorized contents remain safe in your computer.

This post will show you how to disable usb port from can be used automatically. This will deny read and write access to all external removable hard drive disks or an USB device connected to your computer for all users. This task should be performed by system administrators use the Group Policy Editor Windows 7.

Group Policy Editor Windows 7

Group policy is a functionality in Windows that enables IT administrators to customize what users’ computers look like in an automated way. In order to manage the group’s policy, they use a tool called gpedit.msc. Gpedit.msc is a tool for system administration and security policies on your computer.

Note : Below steps applies to Windows 7, Windows 8, Windows Server 2008 R2, Windows Server 2012 (click here)

How to Disable USB Port with Gpedit Windows 7

Steps :
1. Go to Run.
2. Type > gpedit.msc and press enter.
3. Under Computer Configuration > Policies > Administrative Templates > System > Removable Storage Access
Change the state to Enabled for for Removal Disks as below :

Removable Disks: Deny execute access Enabled
Removable Disks: Deny read access Enabled
Removable Disks: Deny write access Enabled

In the right pane, right click on Removable Disks: Deny read access and click on Properties.

See also  How to Install ESXi 5.5 Update 2 using USB Flash Drive

Group Policy Editor Windows 7

3 thoughts on “Group Policy Editor Windows 7 – USB Devices Disabled”

  1. Hey guys,

    I want to introduce to you guys a software called AccessPatrol –

    AccessPatrol allows you to remote control the USB access of your networked computers. If you are in an office and you want to control all of your employee’s USB access, you can set this up easily with AccessPatrol.

    AccessPatrol can be downloaded as a free trial from the website!

  2. This does not work in for Windows 7 workstations, you can disable “Execution” on USB devices, but you cannot disable Read or Write Access with this policy on Windows 7 devices. OS must be Vista or newer.


Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.