How to Enable or Disable Access to Removable Storage Devices in Windows 11
Access to removable storage devices in Windows 11 controls whether external hardware like USB flash drives, external hard drives, and SD cards work when plugged into your computer. Blocking these devices stops people from copying private files or spreading malware through your USB ports.
Windows 11 allows full read and write access to all external storage by default. You can change this behavior to block all removable drives or set them to read-only mode using built-in tools like the Local Group Policy Editor or the Registry Editor (a database for system settings).
Configure access to removable storage in Windows 11 using either the Local Group Policy Editor or the Registry Editor. Navigate to System Removable Storage Access and modify the “All Removable Storage classes: Deny all access” policy to enable or disable device usage.
Enable or Disable Removable Storage Access for All Users Using Group Policy
Local Group Policy Editor (a built-in tool for managing system settings) lets you disable removable storage access for all users on your computer at once. This method works on Windows 11 Pro, Enterprise, and Education editions. You need to be signed in as an administrator to make this change, which blocks everyone from using USB drives and portable disks.
- Open the Local Group Policy Editor. Press the Win and R together, type
gpedit.msc, and press Enter. ⚠️ Admin privileges required - In the left pane, navigate to:
Computer Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access to Removable Storage Devices
This is the default setting.
- Select the Not Configured option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
To Block Access to Removable Storage Devices
- Select the Enabled option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
Option Two
Enable or Disable Removable Storage Access for Specific Users Using Group Policy
Local Group Policy Editor (a built-in tool for managing system settings) lets you disable removable storage access for specific user accounts while leaving other people free to use USB drives. This method requires Windows 11 Pro, Enterprise, or Education and administrative rights so you can target individual user profiles without changing system-wide settings.
- Open the Local Group Policy Editor for the user or group you want to control. ⚠️ Admin privileges required
- In the left pane, navigate to:
User Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access
This is the default setting.
- Select the Not Configured option
- Click OK
- Close the Group Policy Editor
To Block Access
- Select the Enabled option
- Click OK
- Close the Group Policy Editor
Option Three
Enable or Disable Removable Storage Access for All Users Using the Registry
⚠️ Admin privileges required
To Allow Access to Removable Storage Devices
This is the default setting. Run this command to block access:
reg delete "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
To Block Access to Removable Storage Devices
Run this command to restore access:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /t REG_DWORD /d 1 /f
Summary
Blocking removable storage access on Windows 11 involves using either the Local Group Policy Editor for Pro and Enterprise editions or Registry Editor for all versions. These built-in tools let you protect your computer by stopping anyone from plugging in unauthorized USB drives and portable storage devices.
How do I disable all removable storage access for a user?
Expand Computer Configuration Policies Windows Settings Administrative Templates System Removable Storage Access in the left pane, then double-click All Removable Storage classes: Deny all access.
What is removable storage access?
Removable storage refers to any portable media disconnected from computers, used for holding programs, documents, and photos. Common examples include floppy disks, CDs, USB drives, and tape storage.
How can I prevent users from connecting to a USB storage device?
Navigation leads directly to removable disks, where deny execute rules become visible.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!