Sometimes you need to disable USB ports on a computer or laptop to restrict access to connecting flash drives, hard drives and other USB devices. Disabling the USB ports will help prevent the connection of any drives that could be used for theft important information or cause a computer to become infected with a virus and spread malware software on local network.
Restricting access to USB ports
Consider 7 ways, with which you can block USB ports:
- Disabling USB through BIOS settings
- Changing registry settings for USB devices
- Disabling USB ports in device manager
- Uninstalling USB Controller Drivers
- Using Microsoft Fix It 50061
- Usage additional programs
- Physical shutdown of USB ports
1. Disabling USB ports through BIOS settings
- Sign in BIOS settings.
- Disable all items related to the USB controller (for example, USB Controller or Legacy USB Support).
- After you have made these changes, you need to save the settings and exit the BIOS. This is usually done with the key F10.
- Restart your computer and make sure the USB ports are disabled.
2. Enable and disable USB drives using the registry editor
If disabling via BIOS does not suit you, you can block access directly in Windows itself using the registry.
The instructions below allow you to block access to various USB drives (for example, flash drives), but other devices such as keyboards, mice, printers, scanners will still work.
- Open the Start menu -> Run, type " regedit and click OK to open the Registry Editor.
- Proceed to the next section
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
- On the right side of the window, find the item " start” and double click on it to edit it. Enter value " 4 » to block access to USB storage devices. Accordingly, if you enter again the value " 3 ”, access will be re-opened.
Click OK, close Registry Editor, and restart your computer.
The above method only works when installed driver USB controller. If for security reasons the driver has not been installed, the value of the "Start" parameter can be automatically reset to "3" when the user connects USB stick and Windows will install the driver.
3. Disabling USB ports in Device Manager
- Click right click mouse on the icon A computer» and select context menu item "Properties". A window will open on the left side of which you need to click on the link " Device Manager».
- In the device manager tree, find the item " USB controllers' and open it.
- Disable the controllers by clicking the right mouse button and selecting the Disable menu item.
This method doesn't always work. In the example shown in the figure above, disabling the controllers (the first 2 points) did not lead to the desired result. Disabling the 3rd item (USB mass storage device) worked, but it only allows you to disable a single instance of the USB drive.
4. Remove the USB controller drivers
As an option to disable ports, you can simply uninstall USB driver controller. But the disadvantage of this method is that when the user connects a USB drive, Windows will check for drivers and, if they are not available, will offer to install the driver. This in turn will open access to the USB device.
5. Prevent users from connecting USB storage devices using the application from Microsoft
Another way to disable access to USB drives is to use Microsoft Fix It 50061(http://support.microsoft.com/kb/823732/ru - the link may open in a few minutes). The essence of this method lies in the fact that 2 conditions for solving the problem are considered:
- The USB stick has not yet been installed on the computer
- The USB device is already connected to the computer
Within the framework of this article, we will not consider this method in detail, especially since you can study it in detail on the Microsoft website using the link above.
It should also be taken into account that this way Not suitable for all versions of Windows OS.
6. Using programs to disable / enable access to USB storage devices
There are many programs for setting the prohibition of access to USB ports. Consider one of them - the program USB Drive Disabler.
The program has a simple set of settings that allow you to deny / allow access to certain drives. Also, USB Drive Disabler allows you to configure alerts and access levels.
7. Disconnecting USB from the motherboard
Although physically disabling the USB ports on motherboard is an almost impossible task, you can disable the ports located on the front or top of the computer case by disconnecting the cable that goes to the motherboard. This method will not completely block access to USB ports, but it will reduce the likelihood of using drives by inexperienced users and those who are simply too lazy to connect devices to the back of the system unit.
! Addition
Deny access to removable media through the Group Policy Editor
In modern Windows versions it is possible to restrict access to removable storage devices (including USB drives) using the local editor group policy.
- Run gpedit.msc through the Run window (Win + R).
- Go to the next branch " Computer Configuration -> Administrative Templates -> System -> Removable Storage Access»
- On the right side of the screen, find the item "Removable drives: Deny reading."
- Activate this option ("Enable" position).
This section Local Group Policy allows you to configure read, write, and execute access for different classes of removable media.
If the USB ports on your PC are not working and windows settings and driver updates do not help, perhaps the controller was disabled in the BIOS. In this case, you will need to go to the configuration menu and turn everything back on.
There are many different versions BIOS with their interfaces and subtleties of work. Also, a more modern complex can work on your computer - UEFI, which supports a full-fledged graphical interface. This article discusses distributions that are most often installed on motherboards.
Entering BIOS settings
To start changing the configuration, you need to get into the corresponding menu. It can be opened during power on personal computer- before Windows started loading from the hard drive.
Turn on the PC. In case it's already running: reboot. Wait sound signal speaker: a short single beep indicates that all the internal components necessary for the operation of the computer have been detected.
Now you need to press hotkey to call the configuration. This must be done before changing the screen. If you didn’t have time, and Windows started loading, reboot. The keys depend on the installed motherboard model and version. BIOS firmware. You can find it in the user manual that came with the motherboard, on the official website of the manufacturer or view on your PC screen when loading it:
If you don't know the board model, it's okay. Just try pressing the following keys: Tab , Delete , Esc , F1 , F2 , F8 , F10 , F11 , F12 . One of them will surely fit..
It is not necessary to try only 1 option at a time. You can quickly click all the buttons from the list without any problems. One of them will come up and start the BIOS settings, and the rest will be ignored.
Entering the BIOS/UEFI settings of the latest PCs
Many modern computers boot up so quickly that it is impossible to get into the keystroke method when turning on. This is also true for laptops. Therefore, the latest versions of Windows have acquired a new launch feature. Let's use Windows 8.1 as an example.
Your PC or laptop will restart in setup mode. After restarting the PC, you will also be able to select option to run from a USB drive or DVD disc.
Menu navigation
Almost all BIOS versions are deprived GUI. This means that you will only have to work using the keyboard, as, for example, in Windows consoles. Navigation is carried out using the up-down and right-left arrows. To open any section, use the Enter key to go back - "Escape". A small memo on the keys used is always shown on the screen.
Firmware complex UEFI installed on the most expensive and powerful motherboards. It supports more drivers and able to work with a mouse. Its interface will be familiar Windows users and other modern operating systems.
Each version has its own interface and set of options. Even the names of the same parameters may differ. The following article describes several popular BIOS releases.
AMI BIOS
A very common option that can be found on many modern computers. The main menu is divided into 2 parts: a list of categories and various actions like exit or save. You will work on the left side.
You need to go to the section called " Integrated Peripherals». Russian version There is no interface, so all commands are only in English. Use the Down arrow to highlight this item and press Enter .
Here you need to enable Enabled) 4 options:
- USB EHCI controller- main controller. If the motherboard has version 3.0 ports, this item will be divided into 2 parts: "Controller" and "Controller 2.0";
- USB Keyboard Support– support for keyboards;
- USB Mouse Support– mouse support;
- - work with external storage data: flash drives, disk drives, disks of smartphones and digital cameras.
In some older versions, there are only 2 items " USB controller" and " Legacy USB storage support».
When you're done with the settings, press the F10 key to save your changes and restart your computer.
Phoenix AwardBIOS
Another popular version that can often be found on modern laptops. Doesn't have home page, like AMI, but equipped with convenient thematic tabs at the top. You can move between sections using the "left" - "right" arrows, and between items - using the "up" and "down" arrows.
Go to the section " Advanced» using the Right arrow. Find the category " USB configuration". All paragraphs of this section must be translated into the provision " Enabled". In some versions, the category " USB configuration” may be in the tab “ Peripherals” and not in “Advanced”.
To exit the menu, press F10 and confirm exit.
AMI BIOS for Asus
AMI version used on Asus laptops. Outwardly, it is very similar to Phoenix - a similar bookmarks bar. Settings USB are in the section Advanced". Go there, enable all options and exit with the F10 button.
UEFI
Contrary to popular belief, UEFI is not part of the BIOS. It can rather be called a more advanced, but less popular competitor. There are a large number of different versions, each with its own interfaces. However, here the control is similar to the familiar Windows, so you can easily find the options you need.
Windows settings
If at the BIOS level all ports and controllers are enabled, but the USB ports still do not work, there may be a problem in your settings. Windows systems.
First, just try disconnect and reconnect the device. This will cause the drivers to be validated. If something is wrong with them, Windows will try to reinstall them.
If nothing happens when reconnecting, try turn on the controller in Windows registry. To do this, do the following:
Video: how to set up any BIOS to boot from a USB flash drive
You can enable USB ports on a laptop through the BIOS, Device Manager, Registry Editor, or Group Policy Editor. If access to USB connectors was prohibited intentionally with the help of special software, then you can unlock it in a program where the interface is blocked. All methods are available ordinary users and do not require special training.
Disabling unnecessary devices
If the USB ports suddenly stopped working, and you are now looking for how to turn them on, then first of all, see if the device is connected to the laptop a lot. When using a USB hub, the laptop may not be able to provide power to all devices, causing the USB connectors to become unresponsive. Before you configure USB in the BIOS, disconnect unnecessary hardware from the laptop and check if the ports work. If nothing has changed, then restart the laptop and go into the BIOS.
Enable ports in BIOS
To enter the BIOS at boot, press Delete, F2 or another key depending on the model system board. You can view it on the start screen. 
In the case of a laptop, this screen does not appear because the function is activated. fast loading. You can temporarily disable this technology in the power settings:
Restart your computer. Without quick start you will see all the stages of loading Windows and you can get into the BIOS. If this does not work on Windows 8 or 10 with a UEFI BIOS, try the following method:
After the reboot, select "Diagnostics", then go to " Extra options” and open the UEFI firmware settings. Click "Restart", the next time you start, the BIOS UEFI interface will appear.
To configure USB ports in UEFI, go to the "Peripherals" tab and set the "Legacy USB Support" parameter to "Enabled". If support for USB 3.0 ports is required, activate the corresponding item (USB 3.0 Support). 
In the AMI BIOS, go to the "Integrated Peripherals" section and set the four options to "Enabled":
- USB EHCI Controller.
- USB Mouse Support.
- USB Keyboard Support.
- Legacy USB Storage Detect.
In Phoenix AwardBIOS, go to the "Advanced" tab and go to the "USB configuration" section. All parameters inside must be set to "Enabled" for the USB ports to work. 
In all BIOS versions, to save the configuration, you must press the F10 key and confirm the selection by writing "Y".
Windows Setup
If ports are enabled in the BIOS, but connected via an interface USB devices are not detected by the system, then check the registry editor, device manager and group policy editor. It is possible that changes were made to the system through them, due to which the ports are now not working. You should start with the registry editor.
If the Registry Editor supports USB interface enabled, check the controller drivers in Device Manager.
If you see an icon next to the controller that looks like exclamation point, while you are sure that the interface is supported in the registry editor, this means that there are problems with the drivers. First try updating the software:
If updating the controller software does not help, update the motherboard driver. Download it from the manufacturer's website and install it manually. Another way to update the drivers for all controllers at once is to remove them from the system. Right-click on controllers and select Delete. After a reboot, the system will automatically install the controller drivers, so you no longer have to think about how to enable USB ports - they will work anyway. 
If only removable devices connected via USB do not work, then check in the Group Policy Editor if the read ban is set.
Locate the "Removable Devices: Deny Read" option and set it to "Disable". The problem with the definition of flash drives and external drives should disappear.
Port hardware damage
If the laptop's USB ports or the southbridge on the motherboard are damaged, then no methods will help turn on the interface. Therefore, if the connectors stop working after mechanical impact, liquid getting inside the case, a short circuit or other negative factors, then you should take the laptop to the service for diagnostics. 
In case of system block some USB ports can be replaced by yourself, but in a laptop this is not possible, because all the connectors are soldered to the motherboard.