How to Enable or Disable Access to Removable Storage Devices in Windows 11
You can control access to removable storage devices in Windows 11 by using either the Group Policy Editor or the Registry Editor.
Windows 11 settings control user access to removable storage devices, such as USB flash drives, SD cards, external hard drives, and CD/DVD drives. Administrators can choose to allow or block users from reading data from or writing data to these devices.
By default, Windows 11 grants full read and write access to all removable media for all users, but you can restrict this granularly.
This control is crucial for enhancing security and preventing data leakage or unauthorized software installation, especially in environments with multiple users.
You’ll need administrator privileges on your Windows 11 PC to make these changes.
Configure access to removable storage in Windows 11 using either the Local Group Policy Editor or the Registry Editor. Navigate to System > Removable Storage Access and modify the “All Removable Storage classes: Deny all access” policy to enable or disable device usage.
Option One
Enable or Disable Removable Storage Access for All Users Using Group Policy
- Open the Local Group Policy Editor. Press the Windows key and R together, type
gpedit.msc, and press Enter. ⚠️ Admin privileges required - In the left pane, navigate to:
Computer Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access to Removable Storage Devices
This is the default setting.
- Select the Not Configured option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
To Block Access to Removable Storage Devices
- Select the Enabled option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
Option Two
Enable or Disable Removable Storage Access for Specific Users Using Group Policy
If you need to turn off access to removable storage devices for only certain people or groups, you can use the Group Policy Editor, but this feature is also limited to Windows 11 Pro, Enterprise, and Education editions.
- Open the Local Group Policy Editor for the user or group you want to control. ⚠️ Admin privileges required
- In the left pane, navigate to:
User Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access
This is the default setting.
- Select the Not Configured option
- Click OK
- Close the Group Policy Editor
To Block Access
- Select the Enabled option
- Click OK
- Close the Group Policy Editor
Option Three
Enable or Disable Removable Storage Access for All Users Using the Registry
⚠️ Admin privileges required
To Allow Access to Removable Storage Devices
This is the default setting. Run this command:
reg delete "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
To Block Access to Removable Storage Devices
Run this command:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /t REG_DWORD /d 1 /f
Summary
You’ve learned how to disable removable storage access, like for USB drives, in Windows 10 and 11 using three main methods. Two methods use the Group Policy Editor, which works best for Pro, Enterprise, and Education versions, while the third method uses the Registry and works for all Windows editions.
How do I disable all removable storage access for a user?
Expand ‘Computer Configuration’–>Policies–>Windows Settings–>Administrative Templates–>System–>Removable Storage Access. Double click the All Removable Storage classes: Deny all access policy.
What is removable storage access?
Removable storage is any media you can easily disconnect from your computer. It’s used for saving information like programs, documents, and photos. Examples of removable storage include floppy disks, CDs, USB devices, and tape storage.
How can I prevent users from connecting to a USB storage device?
And we’re going to go to removable disc. So you can see deny execute.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!