Want to prevent others from stealing your PC data through removable storage devices? Or do you want to protect your device from harmful files contained on removable storage devices?

In this article, we’ll explore how you can prevent others from installing removable storage devices on Windows. That way, your device won't read any removable storage devices without your permission. Lastly, we’ll also show you how to allow others to install specific removable storage devices.

How to Prevent Others From Installing Any Removable Storage Devices

Let's start by checking out how you can prevent others from installing any removable storage device into your PC. You can do this using either the Local Group Policy Editor or the Registry Editor.

Using the Local Group Policy Editor

Using a Windows laptop on a brown desk

The Local Group Policy Editor (LGPE) is a reliable tool for troubleshooting system errors. Interestingly, you can also use it for other tasks such as preventing others from changing your Windows desktop background.

Now, here’s how to use the LGPE to prevent others from installing removable storage devices on Windows:

  1. Press Win + R to open the Run command dialog box.
  2. Type gpedit.msc and press Enter to open the LGPE.
  3. Navigate to Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions.
  4. Double-click on the Prevent installation of removable devices option on the right-hand side.
Clicking the prevent installation of removable devices option

Select Enabled on the next screen to prevent others from installing removable storage devices into your PC. Alternatively, select Disabled or Not Configured to restore the default settings.

Finally, press Apply and then press OK to save these changes.

Struggling to access the LGPE on Windows Home? There are a few tricks you can apply to access the LGPE on Windows Home. But if that sounds complicated to you, then skip to the Registry Editor method.

Using the Registry Editor

A person typing commands on a laptop

The Registry Editor is another reliable tool you can use for tweaking system settings and troubleshooting PC issues.

However, this tool is quite sensitive. So, it’s often worth backing up the Registry first before editing its keys.

Now, here’s how to use the Registry Editor to prevent others from installing removable storage devices on Windows:

  1. Press Win + R to open the Run command dialog box.
  2. Type Regedit and press Enter to open the Registry Editor.
  3. Copy-paste the following command into the address bar and press Enter: 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

From there, follow these steps:

  1. Right-click on the Windows folder and select New > Key. From there, name this key as DeviceInstall and press Enter.
  2. Right-click on the DeviceInstall key and select New > Key. Next, name the key as Restrictions and press Enter.
  3. Click the Restrictions folder, right-click on a blank space on the right, and then select New > DWORD (32-bit) Value. From there, name the value as DenyRemovableDevices and press Enter.
Clicking the DenyRemovableDevices value

Now, follow these steps:

  1. Double-click on the DenyRemovableDevices value.
  2. Set the Value data as 1 and then press OK to prevent others from installing storage devices into your PC. Alternatively, set the Value data as 0 and press OK to allow others to install removable storage devices on your PC.
  3. Close the Registry Editor and restart your device to save these changes.

How to Prevent Others From Installing Specific Removable Storage Devices

In some instances, you might want to prevent others from installing specific removable storage devices. So, let’s show you how you can do that using either the LGPE or the Registry Editor.

Using the Local Group Policy Editor

A lady using a Windows PC while holding a cup

Here’s how to use the LGPE to prevent others from installing certain removable storage devices into your PC:

  1. Press Win + R to open the Run command dialog box.
  2. Type gpedit.msc and press Enter to open the LGPE.
  3. Navigate to Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions.
  4. Double-click on the Prevent installation devices that match any of these device IDs option on the right-hand side.
Clicking the Prevent installation devices that match any of these device IDs option

From there, follow these steps:

  1. Select Enabled on the next screen.
  2. Click the Show button in the bottom-right corner. This should pop up in the Show Contents window.
  3. Enter the device ID of the removable storage device in the Value section. You can find device IDs for different storage devices on the Microsoft website.
  4. Press OK after selecting your device ID.
  5. Press Apply and then press OK to save these changes. Alternatively, select either Disabled or Not Configured to restore the default settings.

Using the Registry Editor

Person using a Windows PC while placing it on a lap

Alternatively, you can use the Registry Editor to prevent others from installing specific storage devices into your PC.

Here are the steps you need to follow:

  1. Press Win + R to open the Run command dialog box.
  2. Type Regedit and press Enter to open the Registry Editor.
  3. Copy-paste the following command into the address bar and then press Enter: 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

From there, follow these steps:

  1. Click the DeviceInstall folder in the Windows folder. If it’s missing, right-click on the Windows folder, select New > Key, and then name this key as DeviceInstall. From there, press Enter to save these changes.
  2. Click the Restrictions folder within the DeviceInstall folder. If the key is missing, right-click on the DeviceInstall key and select New > Key. Finally, name the key as Restrictions and then press Enter.
  3. Right-click on the Restrictions folder, select New > Key, and then name this key using the device ID of the storage device you want to block. For now, let's call this key the Device ID Key.
  4. Click on the Device ID Key and then right-click on a blank space on the right.
  5. Select New > DWORD (32-bit) Value, name the value as DenyDeviceIDs, and then press Enter.
Clicking the DenyDeviceIDs option

Now, you can prevent others from installing specific storage devices into your PC through these steps:

  1. Double-click on the DenyDeviceIDs value.
  2. Set the Value data as 1 and then press OK. Finally, close the Registry Editor and restart your device to save these changes.

How to Allow Others to Install Specific Removable Storage Devices

Instead of preventing others from installing removable storage devices, you might want to allow them to install specific devices. So, let's show you how you can do that using the LGPE and the Registry Editor.

Using the Local Group Policy Editor

A person using a Windows device on a desk

Here’s how to use the LGPE to allow others to install specific storage devices into your PC:

  1. Press Win + R to open the Run command dialog box.
  2. Type gpedit.msc and press Enter to open the LGPE.
  3. Navigate to Computer Configuration > Administrative Templates > System > Device Installation > Device Installation Restrictions.
  4. Double-click on the Allow installation devices that match any of these device IDs option on the right-hand side.
Clicking the Allow installation devices that match any of these device IDs option

From there, follow these steps:

  1. Select Enabled on the next screen.
  2. Click the Show button in the bottom-right corner. This will pop up in the Show Contents window.
  3. Enter the device ID in the Value section and then press OK. You can check out the device IDs for different storage devices on the Microsoft website.
  4. Press OK to continue.
  5. Press Apply and then press OK to save these changes.

Using the Registry Editor

Person using a Windows PC

You can also use the Registry Editor to allow others to install specific storage devices into your PC.

Here are the steps you need to follow:

  1. Press Win + R to open the Run command dialog box.
  2. Type Regedit and press Enter to open the Registry Editor.
  3. Copy-paste the following command into the address bar and then press Enter: 

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions

From there, follow these steps:

  1. Right-click on the Restrictions folder and select New > Key.
  2. Name this key using the relevant device ID and then press Enter. For now, let's call this key the Device ID Key.
  3. Click on the Device ID Key. Next, right-click on a blank space on the right and then select New > DWORD (32-bit) Value.
  4. Name the value as AllowDeviceIDs and press Enter.
Clicking the AllowDeviceIDs option

Now, you can allow others to install specific storage devices into your PC through these steps:

  1. Double-click on the AllowDeviceIDs value.
  2. Set the Value data as 1 and then press OK.
  3. Close the Registry Editor and restart your device to save these changes.

Preventing the Installation of Suspicious Storage Devices on Windows Is Easy

Removable storage devices make it easy for you to share files with anyone. However, others might often use removable storage devices to steal your data. In some cases, some people might use faulty storage devices that could wreak havoc on your PC.

And if you only want to disable read or write access for your removable storage devices, then there are solutions for that too.