Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am the owner of a small company (4 employees) and I have Win 7 Ultimate on my machine. My other PCs are connected via LAN and they too have Windows 7 on their machine. My question is, is there any way to prevent USB storage devices. Recently I found one of the employee cheating on me and found he is taking away some important projects which he has access too. I'd like to prevent that.

I read some tricks about changing values in registry but those are just tricks. Changing it's value back again would bring back the USB access. I need some genuine way to prevent access to USB. Only me when logged in as Administrator account should be able to access USB storage devices.

share|improve this question

closed as off-topic by Ward, Tim Brigham, Dave M, TheCleaner, Jacob Sep 28 '13 at 0:21

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions must demonstrate a minimal understanding of the problem being solved. Try including attempted solutions, why they didn't work, and the expected results. See How can I ask better questions on Server Fault? for further guidance." – Tim Brigham, Dave M, TheCleaner, Jacob
If this question can be reworded to fit the rules in the help center, please edit the question.

There's physical locks for USB devices - might be a nice, OS agnostic way to prevent people from misusing USB use – Journeyman Geek Sep 26 '13 at 5:25
The tool to prevent the problem you're highlighting is called "Attorney" - Every company should have one. Beyond that do what Journeyman Geek suggested, or what the DoD does (shoot epoxy into all the USB ports) – voretaq7 Sep 26 '13 at 15:36
Symantec AV allows you to do this...other AV's may as well. – boburob Sep 26 '13 at 15:54
You should almost certainly block network access as well. They could copy files to The Cloud when you're not looking. – jscott Sep 28 '13 at 0:19

The answer is to use a group policy. Please see ; the second answer tells you how to disable USB storage devices.

You will need to whitelist the devices you want while disabling everything else.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.