How to Enable or Disable Installation of Removable Devices in Windows


By default, Windows will install removable devices (ex: USB flash drive) when first connected to your PC.

If you like, you can enable a group policy setting that prevents Windows from installing removable devices and existing removable devices cannot have their drivers updated. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of removable devices from a remote desktop client to the remote desktop server.

Users will still be able to use removable devices that have already been connected and installed prior to enabling the group policy.

This tutorial will show you how to enable or disable the installation of removable devices for all users in Windows 7, Windows 8, and Windows 10.

You must be signed in as an administrator to enable or disable installation of removable devices.



Contents

  • Option One: Enable or Disable Installation of Removable Devices in Local Group Policy Editor
  • Option Two: Enable or Disable Installation of Removable Devices using a REG file



EXAMPLE: When installation of removable devices is disabled
Enable or Disable Installation of Removable Devices in Windows-device_manager_removable_device_forbidden.jpg Enable or Disable Installation of Removable Devices in Windows-installation_of_this_device_is_forbidden_by_system_policy.jpg






OPTION ONE

Enable or Disable Installation of Removable Devices in Local Group Policy Editor


In Windows 7, the Local Group Policy Editor is only available in the Professional, Ultimate, and Enterprise editions.

In Windows 8, the Local Group Policy Editor is only available in the Pro and Enterprise editions.

In Windows 10, the Local Group Policy Editor is only available in the Pro, Enterprise, and Education editions.

All editions can use Option Two.


1 Open the Local Group Policy Editor.

2 Navigate to the key below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration\Administrative Templates\System\Device Installation\Device Installation Restrictions

Enable or Disable Installation of Removable Devices in Windows-prevent_installation_of_removable_devices_gpedit-1.jpg

3 In the right pane of Device Installation Restrictions in Local Group Policy Editor, double click/tap on the Prevent installation of removable devices policy to edit it. (see screenshot above)

4 Do step 5 (enable) or step 6 (disable) below for what you would like to do.


5 To Enable Installation of Removable Devices

A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Not Configured is the default setting.


6 To Disable Installation of Removable Devices

A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)

Enable or Disable Installation of Removable Devices in Windows-prevent_installation_of_removable_devices_gpedit-2.png


7] When finished, you can close the Local Group Policy Editor if you like.






OPTION TWO

Enable or Disable Installation of Removable Devices using a REG file


The downloadable .reg files below will add and modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions

DenyRemovableDevices DWORD

(delete) = Enable
1 = Disable


1 Do step 2 (enable) or step 3 (disable) below for what you would like to do.


2 To Enable Installation of Removable Devices

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Enable_installation_of_removable_devices.reg

Download


3 To Disable Installation of Removable Devices

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Disable_installation_of_removable_devices.reg

Download


4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 Restart the computer to apply.

8 You could now delete the downloaded .reg file if you like.


That's it,
Shawn


Related Tutorials



  • Windows 11 Tutorials