How to Disable USB Port in Windows 10: A Step-by-Step Guide

By / November 7, 2025

USB ports are incredibly useful — they let you connect flash drives, printers, external hard drives, and countless other peripherals. But in certain situations, you may want to disable USB ports in Windows 10 entirely.

Whether it’s to prevent unauthorized data transfer, block malware-infected drives, or secure company systems, disabling USB ports can help protect your PC.

In this step-by-step guide, you’ll learn how to disable USB ports in Windows 10 using multiple methods — from simple Device Manager tweaks to Group Policy and Registry edits. We’ll also explain how to re-enable them later if needed.

Why Disable USB Ports in Windows 10?

There are several good reasons to turn off USB ports on a Windows 10 computer — especially in business, school, or public environments.

Reason Description
🔒 Prevent Data Theft Stops users from copying sensitive files to USB drives.
🦠 Reduce Malware Risk Blocks infected flash drives from spreading viruses.
🧑‍💻 Enhance Network Security Prevents unauthorized external devices.
⚙️ Control Device Access Useful for IT admins managing shared systems.
🚫 Child Safety Prevents kids from plugging in unknown drives.

Disabling USB ports is a quick, effective way to secure your data and hardware without physically removing them.

Different Ways to Disable USB Ports

Windows 10 offers multiple methods to disable USB ports — depending on your level of access and preference.

Method Tool Used Difficulty
1 Device Manager Beginner
2 BIOS/UEFI Intermediate
3 Registry Editor Intermediate
4 Group Policy Editor Advanced
5 Command Prompt / PowerShell Advanced
6 Third-Party Software Beginner

Let’s go step by step through each method.

Method 1: Disable USB Ports Using Device Manager

This is the simplest and most direct way to disable USB ports.

Steps:

  1. Press Windows + X and select Device Manager.

  2. Expand the section Universal Serial Bus controllers.

  3. Right-click each USB Root Hub or USB Host Controller and select Disable device.

  4. Confirm when prompted.

✅ Result: USB ports will stop responding to new devices, though connected peripherals like your mouse or keyboard might still work.

💡 Tip: You can re-enable them anytime by returning to the same menu and selecting Enable device.

Method 2: Disable USB Ports Through BIOS or UEFI Settings

If you want a hardware-level block, disable USB ports directly in BIOS or UEFI firmware.

Steps:

  1. Restart your computer.

  2. During boot, press the BIOS key (often F2, Del, or Esc).

  3. Navigate to the Advanced or Integrated Peripherals section.

  4. Locate USB Configuration or USB Controller.

  5. Set it to Disabled.

  6. Save changes and exit.

⚠️ Note: BIOS options vary by manufacturer (HP, Dell, Lenovo, etc.). Consult your PC’s manual if unsure.

This method ensures even the operating system cannot override the block — perfect for locked-down environments.

Method 3: Disable USB Ports via Windows Registry Editor

The Registry Editor provides a software-level block by disabling USB drivers.

Steps:

  1. Press Windows + R, type regedit, and hit Enter.

  2. Navigate to this path:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

  3. On the right pane, double-click Start.

  4. Change the Value data from 3 (enabled) to 4 (disabled).

  5. Click OK, then close Registry Editor.

  6. Restart your computer.

✅ USB storage devices will now be blocked. You’ll see no response when plugging them in.

To Re-Enable:

Repeat the steps and set the value back to 3.

⚠️ Caution: Editing the registry incorrectly can cause system issues — proceed carefully or create a backup first.

Method 4: Disable USB Ports Using Group Policy Editor (GPO)

If you’re managing multiple PCs on a network or domain, Group Policy Editor (GPE) is the best enterprise-level method.

Steps:

  1. Press Windows + R, type gpedit.msc, and hit Enter.

  2. Go to the following path:

    Computer Configuration → Administrative Templates → System → Removable Storage Access

  3. On the right, find:

    • Removable Disks: Deny execute access

    • Removable Disks: Deny read access

    • Removable Disks: Deny write access

  4. Double-click each and set them to Enabled.

  5. Click Apply → OK.

  6. Restart your system.

✅ USB storage drives will no longer read or write data on this computer.

💡 Pro Tip: You can apply these policies selectively using Active Directory across multiple systems.

Method 5: Disable Only USB Storage Access

If you still want USB keyboards or mice to work but block USB drives only, use this Registry tweak:

Steps:

  1. Open Registry Editor (regedit).

  2. Navigate to:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

  3. Change Start value to 4.

  4. Reboot your system.

🧠 Why it works: The USBSTOR service handles storage devices — by disabling it, other USB peripherals remain functional.

Method 6: Disable USB Ports with Command Prompt or PowerShell

For power users and IT admins, the command line offers quick automation.

Using Command Prompt:

  1. Open Command Prompt as Administrator.

  2. Enter this command:

    reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR" /v Start /t REG_DWORD /d 4 /f

  3. Hit Enter.

This disables USB storage just like the Registry method.

To Enable Again:

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR" /v Start /t REG_DWORD /d 3 /f

Method 7: Use Third-Party Tools for USB Control

If you prefer a graphical interface, several USB management tools can help.

Tool Features Ideal For
USB Disabler Pro Block or allow USB access instantly IT admins
SysTools USB Blocker Password-protected USB access Business users
GiliSoft USB Lock Blocks drives, printers, modems Home & office
Endpoint Protector Centralized enterprise USB management Corporations

These apps allow easy on/off toggling, logging, and even access whitelisting for specific users.

How to Re-Enable USB Ports in Windows 10

Reversing any of the above methods is simple.

Method Used How to Re-Enable
Device Manager Right-click device → Enable
Registry Editor Change USBSTOR “Start” value to 3
Group Policy Set USB restrictions to “Not Configured”
BIOS Re-enable USB Controller
Command Prompt Run command with value /d 3

💡 Always restart your system after re-enabling to apply changes.

How to Verify if USB Ports Are Disabled

To confirm your settings worked:

  1. Plug in a USB drive.

  2. If nothing appears in File Explorer or you see an error message, the port is disabled.

  3. Open Device Manager → “Universal Serial Bus controllers.”

    • Disabled ports show a small downward arrow icon.

You can also check the Event Viewer for USB connection attempts under Windows Logs → System.

Tips for Managing USB Port Access Safely

Here are some best practices to balance security and convenience:

  • 🧠 Don’t disable all ports if you use USB keyboards or mice.

  • 🔒 Use Group Policy for multi-user environments.

  • 🧩 Lock BIOS settings with a password to prevent tampering.

  • 🔄 Regularly review access logs if managing office systems.

  • 🧱 Physically block unused ports with USB port locks for maximum security.

  • 💽 Back up your registry before making changes.

Common Issues and Troubleshooting

Problem Solution
USB devices still work after disabling Restart your PC and check BIOS/Registry conflicts.
No response from mouse/keyboard Don’t disable all ports; keep at least one functional for input.
“Access denied” error in Registry Run regedit as Administrator.
GPO not applying Force-update Group Policy using gpupdate /force.

Security Advantages of Disabling USB Ports

Disabling USB ports isn’t just about convenience — it’s a strong security measure against threats.

  • Stops malware injection: Many ransomware attacks spread via infected flash drives.

  • Prevents insider threats: Reduces data theft risk in workplaces.

  • Complies with IT security standards: Especially for financial and government sectors.

  • Protects from autorun viruses: Disabling storage ports removes attack entry points.

In short, it’s one of the simplest ways to enhance endpoint security.

Conclusion

USB ports are powerful — but with that power comes risk. Fortunately, Windows 10 offers multiple methods to disable or restrict USB ports, ensuring your data remains safe from unauthorized access.

From using Device Manager and BIOS settings to Group Policy and Registry edits, you have full control over how your PC interacts with USB devices.

Choose the method that best suits your environment — whether it’s a personal computer or a corporate network.

By learning how to disable USB ports in Windows 10, you’re taking a major step toward better data security and system integrity.

🔍 FAQs

1. How can I temporarily disable USB ports in Windows 10?

Use Device Manager to disable the USB Root Hub temporarily. You can re-enable it later with a few clicks.

2. Can I block only USB drives but keep my mouse and keyboard working?

Yes. Disable only the USBSTOR service in the Registry — this blocks storage devices but keeps peripherals functional.

3. Is it safe to disable USB ports from BIOS?

Yes. It’s a secure method, especially for organizations, but remember to protect BIOS with a password to prevent re-enabling.

4. Will disabling USB ports affect charging?

Yes, devices plugged into disabled ports may not charge since power delivery is cut off.

5. How do I enable USB ports again after disabling them?

Just reverse the method used — for example, change the Registry value back to 3, or re-enable USB Root Hubs in Device Manager.

🧩 Key Takeaways

  • 🔒 Disabling USB ports helps protect against data theft and malware.

  • ⚙️ You can disable USB ports via Device Manager, BIOS, Registry, Group Policy, or Command Line.

  • 🧠 Disable only USB storage access to keep other devices functional.

  • 🚫 BIOS-level disablement provides the strongest security.

  • 💡 Always document changes and back up your system before editing Registry or GPO settings.

✅ In summary:
Learning how to disable USB port in Windows 10 empowers you to control who and what connects to your computer. Whether you’re securing personal data or enforcing corporate IT policies, these methods give you complete authority over your system’s hardware access.

Related Posts:

Scroll to Top