Protect Your System! Disable Removable Storage to Prevent Malware in Windows 11

Step 2: Navigate to Removable Storage Access

1. Once Group Policy Editor opens, navigate to the following path:

Computer Configuration > Administrative Templates > System > Removable Storage Access

2. In the Removable Storage Access folder, you’ll see various policy options related to external storage devices.

Step 3: Disable Access to All Removable Storage

1. Look for an option named “All Removable Storage Classes: Deny All Access”.
2. Double-click on the option to open the settings window.
3. In the window that appears, select the Enabled option to disable access to all types of removable storage.
4. Click Apply and OK to save the changes.

Step 4: Restart the Computer

1. After you enable this policy, restart your computer to apply the changes.
2. After the restart, all access to the removable storage will be disabled, including USB Flash Drives, External Hard Drives, and SD Cards.

Group Policy Editor is only available on Windows 11 Pro, Enterprise, and Education. If you’re using Windows 11 Home, you’ll need to use Registry Editor or a third-party tool.

This policy will block all types of removable storage. If you only want to block certain types (for example, only USB Flash Drives), you can set more specific policies in the Removable Storage Access folder.

2. Using the Registry Editor

Registry Editor is a tool that allows you to make in-depth changes to your Windows 11 system. By editing the registry, you can block access to removable storage such as USB Flash Drives, External Hard Drives, and SD Cards. Here are the steps:

Step 1: Open Registry Editor

1. Press the Windows + R keys on your keyboard to open the Run window.
2. Type regedit in the field provided, then press Enter.
3. If you see a User Account Control (UAC) alert, click Yes to continue.

Step 2: Navigate to the Right Key

1. Once Registry Editor opens, navigate to the following path:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices

2. If the RemovableStorageDevices folder doesn’t exist, you can create it manually. Right-click on the Windows folder, select New > Key and give it a RemovableStorageDevices name.

Step 3: Create a New DWORD to Block Removable Storage

1. In the RemovableStorageDevices folder, right-click on an empty area and select New >  DWORD (32-bit) Value.
2. Name the new DWORD Deny_All.
3. Double-click on the Deny_All, then change the Value data to 1.
4. Click OK to save the changes.

Step 4: Restart the Computer

1. After making changes, restart your computer for the new settings to take effect.
2. After restarting, access to all removable storage will be blocked.

3. Using PowerShell

In addition to using Group Policy Editor and Registry Editor, you can also disable removable storage in Windows 11 by using PowerShell. PowerShell is a powerful command-line tool that allows administrators to automate system tasks, including blocking access to removable storage. Here is the full guide.

Steps to Disable Removable Storage with PowerShell

1. Click Start, type PowerShell, then right-click on Windows PowerShell and select Run as Administrator.
2. If you see a User Account Control (UAC) alert, click Yes to continue.
3. Enter the following command in PowerShell to block access to all removable storage:

Set-ItemProperty -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices” -Name “Deny_All” -Value 1 -Type DWord

This command will create or change the value of the Deny_All in the registry to 1, which means access to all removable storage is blocked.

4. Press Enter to execute the command.
5. After running the command, restart your computer for the changes to take effect. After restarting, access to all removable storage such as USB Flash Drives, External Hard Drives, and SD Cards will be disabled.

How to Restore Access to Removable Storage

If at any point you need to restore access to removable storage, you can use PowerShell to delete or change the registry values that have been created. Here are the steps:

1. Follow the same steps as before to open PowerShell with administrator privileges.
2. Enter the following command in PowerShell to restore access to removable storage:

Set-ItemProperty -Path “HKLM:\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices” -Name “Deny_All” -Value 0 -Type DWord

This command will change the value of Deny_All to 0, which means access to removable storage is allowed again.

3. Press Enter to execute the command.
4. Restart your computer for the changes to take effect.