How to Enable or Disable Access to Removable Storage Devices in Windows 11
You can control access to removable storage devices in Windows 11 by using either the Group Policy Editor or the Registry Editor.
Removable storage devices, like USB flash drives, SD cards, external hard drives, and CD/DVD drives, let you control whether users can read from or write to them.
By default, Windows 11 grants full read and write access to all removable media for all users, but you can restrict this granularly.
This control is crucial for enhancing security and preventing data leakage or unauthorized software installation, especially in environments with multiple users.
You’ll need administrator privileges on your Windows 11 PC to make these changes.
Configure access to removable storage in Windows 11 using either the Local Group Policy Editor or the Registry Editor. Navigate to System > Removable Storage Access and modify the “All Removable Storage classes: Deny all access” policy to enable or disable device usage.
Option One
Enable or Disable Removable Storage Access for All Users Using Group Policy
Note: This tool is only available in Windows 10/11 Pro, Enterprise, and Education editions. If you have Home edition, use Option Three instead.
- Open the Local Group Policy Editor. Press the Windows key and R together, type
gpedit.msc, and press Enter. ⚠️ Admin privileges required - In the left pane, navigate to:
Computer Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access to Removable Storage Devices
This is the default setting.
- Select the Not Configured option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
To Block Access to Removable Storage Devices
- Select the Enabled option (click the dot next to it)
- Click OK
- Close the Group Policy Editor
Option Two
Enable or Disable Removable Storage Access for Specific Users Using Group Policy
Note: This tool is only available in Windows 10/11 Pro, Enterprise, and Education editions.
- Open the Local Group Policy Editor for the user or group you want to control. ⚠️ Admin privileges required
- In the left pane, navigate to:
User Configuration > Administrative Templates > System > Removable Storage Access - In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access
To Allow Access
This is the default setting.
- Select the Not Configured option
- Click OK
- Close the Group Policy Editor
To Block Access
- Select the Enabled option
- Click OK
- Close the Group Policy Editor
Option Three
Enable or Disable Removable Storage Access for All Users Using the Registry
⚠️ Admin privileges required
To Allow Access to Removable Storage Devices
This is the default setting. Run this command:
reg delete "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
To Block Access to Removable Storage Devices
Run this command:
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /t REG_DWORD /d 1 /f
Summary
You’ve now learned how to control access to removable storage devices, like USB drives, in Windows 10 and Windows 11. You have three options to choose from. Option One and Two use the Group Policy Editor and work best for Pro, Enterprise, and Education editions. Option Three uses the Registry and works for all Windows editions. Choose the method that works best for your version of Windows and your needs.
How do I disable all removable storage access for a user?
Expand ‘Computer Configuration’–>Policies–>Windows Settings–>Administrative Templates–>System–>Removable Storage Access. Double click the All Removable Storage classes: Deny all access policy.
What is removable storage access?
Removable storage is any media you can easily disconnect from your computer. It’s used for saving information like programs, documents, and photos. Examples of removable storage include floppy disks, CDs, USB devices, and tape storage.
How can I prevent users from connecting to a USB storage device?
And we’re going to go to removable disc. So you can see deny execute.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!