How to Enable or Disable Access to Removable Storage Devices in Windows 11

Option One

Enable or Disable Removable Storage Access for All Users Using Group Policy

Note: This tool is only available in Windows 10/11 Pro, Enterprise, and Education editions. If you have Home edition, use Option Three instead.

1. Open the Local Group Policy Editor. Press the Windows key and R together, type gpedit.msc, and press Enter. ⚠️ Admin privileges required
2. In the left pane, navigate to: Computer Configuration > Administrative Templates > System > Removable Storage Access
3. In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access

To Allow Access to Removable Storage Devices

This is the default setting.

1. Select the Not Configured option (click the dot next to it)
2. Click OK
3. Close the Group Policy Editor

To Block Access to Removable Storage Devices

1. Select the Enabled option (click the dot next to it)
2. Click OK
3. Close the Group Policy Editor

Option Two

Enable or Disable Removable Storage Access for Specific Users Using Group Policy

Note: This tool is only available in Windows 10/11 Pro, Enterprise, and Education editions.

1. Open the Local Group Policy Editor for the user or group you want to control. ⚠️ Admin privileges required
2. In the left pane, navigate to: User Configuration > Administrative Templates > System > Removable Storage Access
3. In the right pane, find and double-click the policy called All Removable Storage classes: Deny all access

To Allow Access

This is the default setting.

1. Select the Not Configured option
2. Click OK
3. Close the Group Policy Editor

To Block Access

1. Select the Enabled option
2. Click OK
3. Close the Group Policy Editor

Option Three

Enable or Disable Removable Storage Access for All Users Using the Registry

⚠️ Admin privileges required

To Allow Access to Removable Storage Devices

This is the default setting. Run this command:

reg delete "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /f

To Block Access to Removable Storage Devices

Run this command:

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices" /v Deny_All /t REG_DWORD /d 1 /f

Summary

You’ve now learned how to control access to removable storage devices, like USB drives, in Windows 10 and Windows 11. You have three options to choose from. Option One and Two use the Group Policy Editor and work best for Pro, Enterprise, and Education editions. Option Three uses the Registry and works for all Windows editions. Choose the method that works best for your version of Windows and your needs.