Skip to main content

Disable USB storage device write (make them read-only)

Posted March 2007 by Steve Sinchak

In the corporate world, a lot of time is spent on locking down computers to minimize the risk of confidential information leaving the company.  With the popularity of USB storage devices in recent years the problem for large corporations has exploded. Almost all users want to use USB storage devices to move data around.  With the size of USB storage devices increasing so much in recent years, the risk is increasing as more and more data could possibly be stolen or lost accidentally. In companies, USB storage devices have been banned completely and disabled from use on company computers.

In Windows Vista there is an alternative that will allow your corporate users to be able to read from USB storage devices but not write any data to them. Effectively turning on USB storage devices for all users but making them read-only.  This way users can still read information off of USB  storage devices that a third-party vendor may provide data on while preventing the employee from writing any data back to the storage device.

To setup read only USB storage device operation, follow these steps below:

  1. Click on the Start Button and type in Regedit and hit Enter.
  2. Navigate through HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control.
  3. Right click on Control and select New and then Key.  Call the new key StorageDevicePolicies.
  4. Right click on StorageDevicePolicies and select New and then Dword. Call the new dword WriteProtect.
  5. Right click on WriteProtect and select Properties. Set the value to 1 and hit OK.

The computer is now configured to disable writing to USB storage devices.

Related Posts


If you own a Google Chromecast streaming device, you can easily share a browser tab in Chrome browser or even your entire desktop.  This can be very useful when presenting from your laptop or if you just want to watch something on a big screen that is only on your PC.  The only requirement is you must be on the same network as your Chromecast...

Read More

If you are a fan of minimalist desktop experiences, hiding the desktop icons are an easy way to clean up the Windows interface.  Instead of saving everything to your desktop, use the default profile folders such as downloads and documents.  Actually hiding all the icons on your desktop is a very simple customization hidden in the right-click context menu.  Just right-click on the desktop, select View...

Read More

Google security researchers have published details about a major security flaw found in the SSL protocol that is used to encrypt data transferred between your browser and a web server. SSL is typically used in situations where logon credentials are validated...

Read More

Enabling two-factor authentication is a great way to add an additional level of protection to your Microsoft account.  Even if your password is stolen, your account is still protected because two-factor authetication requires an additional level of verification to log in. Microsoft calls their version of two-factor authentication "two-step verification" and it works by providing you with a random code...

Read More