How to Enable or Disable Access to Removable Storage Devices in Windows 11
Blocking access to removable storage devices in Windows 11 stops anyone from plugging in USB drives, external hard drives, and SD cards to copy files or spread malware. This security setting lets you block these devices completely or set them to read-only mode so people can read files but not save new ones.
Windows 11 turns on full read and write access for all USB drives by default. You can change this setting using built-in tools like the Local Group Policy Editor or the Registry Editor to keep your computer safe.
Configure access to removable storage in Windows 11 using either the Local Group Policy Editor or the Registry Editor. Navigate to System Removable Storage Access and modify the “All Removable Storage classes: Deny all access” policy to enable or disable device usage.
Enable or Disable Removable Storage Access for All Users Using Group Policy
Removable storage access can be disabled for all users on Windows 11 Pro, Enterprise, or Education computers using the Group Policy Editor. This blocks all users from plugging in USB drives or using other portable storage. Administrator rights are necessary for launching the Local Group Policy Editor via the Win and R shortcut, followed by gpedit.msc and the Enter key.
- Open the Local Group Policy Editor. Press the Win and R together, type
gpedit.msc, and press Enter. ⚠️ Admin privileges required - In the left pane, navigate to:
Computer Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access to Removable Storage Devices
This is the default setting.
- Select the Not Configured option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
To Block Access to Removable Storage Devices
- Select the Enabled option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
Option Two
Enable or Disable Removable Storage Access for Specific Users Using Group Policy
Removable storage access can be disabled for certain people or groups on Windows 11 Pro, Enterprise, or Education computers using the Group Policy Editor. Policies target specific user accounts without restricting others. Administrator permissions are required to access the Local Group Policy Editor for the designated user or group.
- Open the Local Group Policy Editor for the user or group you want to control. ⚠️ Admin privileges required
- In the left pane, navigate to:
User Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access
This is the default setting.
- Select the Not Configured option
- Click OK
- Close the Group Policy Editor
To Block Access
- Select the Enabled option
- Click OK
- Close the Group Policy Editor
Option Three
Enable or Disable Removable Storage Access for All Users Using the Registry
⚠️ Admin privileges required
To Allow Access to Removable Storage Devices
This is the default setting. Run this command to block access:
reg delete "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
To Block Access to Removable Storage Devices
Run this command to restore access:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /t REG_DWORD /d 1 /f
Summary
Disabling removable storage access (such as USB drives) on Windows 10 and 11 involves three primary methods. Two methods rely on the Local Group Policy Editor (a built-in tool for managing system configurations), which works exclusively on Windows 11 Pro, Enterprise, and Education editions. The third method uses the Registry and remains compatible across all Windows editions.
How do I disable all removable storage access for a user?
Expand Computer Configuration Policies Windows Settings Administrative Templates System Removable Storage Access in the left pane, then double-click All Removable Storage classes: Deny all access.
What is removable storage access?
Removable storage refers to any portable media disconnected from computers, used for holding programs, documents, and photos. Common examples include floppy disks, CDs, USB drives, and tape storage.
How can I prevent users from connecting to a USB storage device?
Navigation leads directly to removable disks, where deny execute rules become visible.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!