How to Enable or Disable Access to Removable Storage Devices in Windows 11
Controlling access to removable storage devices in Windows 11 lets you decide if people can use USB drives, SD cards, or external hard drives on your PC.
You can choose to completely block these devices or allow only reading data, which helps keep your computer safe from viruses or unauthorized file copying.
Windows 11 lets administrators manage these settings using either the Group Policy Editor or the Registry Editor, two built-in tools for making system changes.
By default, all users can read and write to removable drives, but you can change this to improve security on your PC.
Configure access to removable storage in Windows 11 using either the Local Group Policy Editor or the Registry Editor. Navigate to System > Removable Storage Access and modify the “All Removable Storage classes: Deny all access” policy to enable or disable device usage.
Enable or Disable Removable Storage Access for All Users Using Group Policy
Removable storage access can be disabled for all users on Windows 11 Pro, Enterprise, or Education computers using the Group Policy Editor. This prevents all users from plugging in USB drives or using other portable storage. To begin, open the Local Group Policy Editor by pressing the Windows key and R together, then typing gpedit.msc and pressing Enter. Administrator rights are necessary for this.
- Open the Local Group Policy Editor. Press the Windows key and R together, type
gpedit.msc, and press Enter. ⚠️ Admin privileges required - In the left pane, navigate to:
Computer Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access to Removable Storage Devices
This is the default setting.
- Select the Not Configured option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
To Block Access to Removable Storage Devices
- Select the Enabled option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
Option Two
Enable or Disable Removable Storage Access for Specific Users Using Group Policy
Removable storage access can be disabled for certain people or groups on Windows 11 Pro, Enterprise, or Education computers using the Group Policy Editor. This allows you to control which users can use USB drives without affecting others. You will need to open the Local Group Policy Editor for the specific user or group you wish to manage, which requires administrator permission.
- Open the Local Group Policy Editor for the user or group you want to control. ⚠️ Admin privileges required
- In the left pane, navigate to:
User Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access
This is the default setting.
- Select the Not Configured option
- Click OK
- Close the Group Policy Editor
To Block Access
- Select the Enabled option
- Click OK
- Close the Group Policy Editor
Option Three
Enable or Disable Removable Storage Access for All Users Using the Registry
⚠️ Admin privileges required
To Allow Access to Removable Storage Devices
This is the default setting. To block access, run this command:
reg delete "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
To Block Access to Removable Storage Devices
To allow access, run this command:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /t REG_DWORD /d 1 /f
Summary
You have learned how to disable removable storage access, such as for USB drives, in Windows 10 and 11 using three primary methods. Two methods utilize the Group Policy Editor, which is most effective on Windows 11 Pro, Enterprise, and Education editions. The third method employs the Registry and is compatible with all Windows editions.
How do I disable all removable storage access for a user?
Expand ‘Computer Configuration’–>Policies–>Windows Settings–>Administrative Templates–>System–>Removable Storage Access. Double click the All Removable Storage classes: Deny all access policy.
What is removable storage access?
Removable storage refers to any media that can be easily disconnected from your computer, used for storing information such as programs, documents, and photos. Common examples include floppy disks, CDs, USB drives, and tape storage.
How can I prevent users from connecting to a USB storage device?
And we’re going to go to removable disc. So you can see deny execute.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!