Hi,
Is there any software that can help me block USB storage on PC but not the mouse and WiFi adapter connected?
Also, is there a way that I can get notified in any ways when someone connects a pen drive or phone to the PC?
Hello lolcocks, :)
You might see if the tutorial below may work for you for this. It disables the usage of USB storage devices.
USB Storage Device - Enable or Disable Connecting - Windows 7 Help Forums
Thank you but people can still change this on their own and get access.
So to be confirm with this is there a way I can be notified in any ways when someone connects a USB to one of my PCs?
Like I get an email or any other kind of notification as soon as someone connects a pen drive to one of my PCs.
Literally any kind of notification.
All these PCs are connected to a single WiFi network, including mine.
Austin ISD has something like that called LanSchool. It's very expensive. You might ask a totally business-oriented computer place for recommendations for a small network.
If they are administrators, then yeah they could enable it again. If they were standard users, they wouldn't be able to.
I'm afraid that I don't know about getting a notification other than something like Roland posted above.
Isn't there any system log that he can find out if a USB was connected during he was absent? By the computer's location he could find out who did it and take measures. Or he could try disabling any USB root hub not currently used from Device Manager. The only way to use a USB Flash drive then would be to disconnect a working device. This is not too easy to guess for an average user, plus he would think twice before disconnecting another device to connect the Flash drive. In any case make other users simple, not Administrators, so they cannot undo any changes you do to block access. What about disabling the plug'n'play service? I haven't tried, but in theory this way the computer would be unable to detect and install any new device.
Warning: Haven't tested and don't know if you have any problems doing that, but to disable the plug'n'play service right-click on This PC and select Manage to open Computer Management. Click on Services and applications, expand Services and find Plug and Play. Right-click on that and select Properties. Change Startup type to Disabled.
To change a user from Administrator to standard, click on search icon and type Users. Select Edit local users and groups and then Add, edit or remove users. There you can select the user and change its account type to User, or whatever is called. I have no other users in my PC, so I cannot see the exact steps to guide you.
The tutorial below can help show you how to change them to be standard users.
Do note that as standard users, they will not be able to do anything that requires elevated rights. You should have an administrator account on each PC so that you will be able to though.
https://www.tenforums.com/tutorials/6...dows-10-a.html
About the Plug and Play service, I read somewhere that it cannot be disabled and is best left at manual as changing it could cause problems. So you have to find another way to block USB devices. What about disabling all the unused USB ports? Some BIOS allow disabling individual USB ports, or you could disable the respective USB root hub device in Device Manager. I'm sure there must be some Group Policy to block access to external storage, but I'm not familiar with the Group Policy settings. Anyone else?
Quote
