How to Enable or Disable USB Ports in Windows 10

This guide shows you how to block or allow USB ports on Windows 10, either for security, parental control, or troubleshooting. You can disable all USB storage devices, specific ports, or the entire USB controller, and re-enable them later. No third-party software is needed—everything is done through Device Manager, Registry Editor, or Local Group Policy Editor.

What You’ll Need

• An administrator account on the Windows 10 PC
• Backup of important data (in case you accidentally disable the wrong device)
• For the Group Policy method: Windows 10 Pro, Enterprise, or Education (not Home)

Step-by-Step

Method 1: Disable USB Ports via Device Manager (Temporary)

1. Press Windows + X and select Device Manager.
2. Expand Universal Serial Bus controllers.
3. Right-click the first item (e.g., Intel(R) USB 3.0 eXtensible Host Controller) and choose Disable device.
4. Click Yes when prompted. Repeat for each USB controller listed (usually 2-4 items).
5. To re-enable, right-click the same device and select Enable device.

Note: This method disables all USB ports on that controller, including keyboards and mice. If you have a USB keyboard/mouse, you may lose input—use a PS/2 device or enable before disconnecting.

Method 2: Disable USB Storage Devices Only (Registry)

1. Press Windows + R, type regedit, and press Enter.
2. Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
3. In the right pane, double-click Start.
4. Change the value to 4 (disable) and click OK. To re-enable, change it back to 3.
5. Close Registry Editor and restart the PC (or the change takes effect immediately for new devices).

Note: This blocks USB flash drives and external HDDs, but USB keyboards, mice, and other non-storage devices still work.

Method 3: Disable Specific USB Ports via BIOS/UEFI

1. Restart your PC and press the key to enter BIOS/UEFI (usually Del, F2, F10, or Esc—check your motherboard manual).
2. Look for settings like USB Configuration, Onboard Devices, or Peripherals.
3. Find individual USB port options (often labeled USB Port 0, Port 1, etc.) and set them to Disabled.
4. Save changes (usually F10) and exit.

Note: Not all BIOS versions allow per-port control; some only have a global USB disable option.

Method 4: Disable USB via Local Group Policy (Pro/Enterprise only)

1. Press Windows + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > System > Removable Storage Access.
3. Double-click All Removable Storage classes: Deny all access.
4. Select Enabled, click OK, then close Group Policy Editor.
5. To reverse, set it to Not Configured or Disabled.

Common Mistakes

• Disabling the wrong controller: In Device Manager, some entries like “USB Root Hub” are for internal devices. Disabling them can stop your mouse or keyboard.
• Not restarting after registry change: The USBSTOR Start value may not take effect until you reboot or unplug/replug the device.
• Forgetting to re-enable: If you disable the USB controller while using a USB mouse, you might be stuck—use the keyboard or a PS/2 mouse to re-enable.
• Using Group Policy on Windows Home: gpedit.msc is not available; use the registry method instead.

Tips

• Before disabling USB ports, ensure you have a non-USB keyboard and mouse (PS/2) or a remote desktop tool to recover if needed.
• To quickly toggle USB storage on/off, create a .reg file with the Start value change and run it as administrator.
• If you want to allow only specific USB devices (like a mouse) but block storage, use Device Manager to disable only “USB Mass Storage Device” entries—but this is per-device, not per-port.
• For enterprise environments, consider using Microsoft Intune or Configuration Manager to centrally manage USB policies.

Troubleshooting

• USB devices still work after disabling: Check that you disabled the correct controller. If you disabled USBSTOR, unplug the device and plug it back in—some devices are already loaded in memory.
• Mouse/keyboard not working after disabling: Restart the PC with the device plugged in. If it still doesn’t work, boot into Safe Mode (press F8 or Shift+Restart) and re-enable the controller.
• Registry edit not applying: Make sure you are editing the correct key (USBSTOR). Also, check if the “Start” value is a DWORD (32-bit) type. If not, delete and recreate it.
• Group Policy not working: Run gpupdate /force in Command Prompt as administrator, then restart. Also ensure the policy is set to “Enabled” and not “Not Configured”.
• Cannot find BIOS USB settings: Some laptops have limited BIOS. Look for “Advanced” or “USB” tabs. If not available, use Device Manager or Registry methods.

Frequently Asked Questions

Q: Will disabling USB ports affect my USB printer or scanner?
A: Yes, if you disable the entire USB controller, all USB devices will stop working. If you only disable USB storage, printers and scanners (which are not storage) will still work.

Q: Can I disable USB ports but keep my keyboard and mouse working?
A: Yes, use the registry method (USBSTOR) to block storage devices only. Your keyboard and mouse are not storage, so they will continue to work.

Q: Is there a way to disable USB ports temporarily without rebooting?
A: Device Manager disables take effect immediately. Registry changes usually require a restart or replugging the device.

Q: How do I re-enable USB ports if I can’t access Windows?
A: Boot into Safe Mode (press F8 during startup or Shift+Restart from the login screen) and then re-enable the devices in Device Manager or change the registry value back to 3.

Q: Can I disable USB ports for specific users only?
A: Yes, with Group Policy you can apply settings to user groups, but it requires Active Directory or local security policies. For a single PC, the registry method affects all users.

Q: Does disabling USB ports prevent data theft?
A: It prevents copying data to USB drives, but a determined user could still use other methods (network, Bluetooth, etc.). It’s a good deterrent but not a complete security solution.

Related

• Mac Won’t Install Apps or Gets Stuck Updating? Fix It
• Encrypted VPN on iPhone: Setup Guide
• How to Delete WinSxS Folder in Windows 10