How to Disable USB Ports on Windows 11

USB ports are convenient — they let you plug in everything from flash drives to printers to mobile devices. But sometimes, you may want to disable USB ports for security or administrative reasons. For example, to prevent unauthorized data transfer, stop users from connecting unknown devices, or block malware that spreads via USB drives.

Luckily, Windows 11 gives you several ways to disable USB ports — from Device Manager to Registry tweaks and Group Policy settings. In this guide, we’ll walk you through every safe and effective method to disable USB ports on Windows 11, step by step.

Why You Might Want to Disable USB Ports

Here are a few common reasons people disable USB ports on Windows 11 PCs:

Prevent data theft: Stop users from copying sensitive files to USB drives.
Improve security: Protect against viruses or ransomware introduced via external drives.
Enforce IT policies: Maintain compliance in office or shared computer setups.
Limit access: Prevent unauthorized devices like external storage or peripherals.

Now let’s go through the various methods to turn off USB ports safely.

Step 1: Disable USB Ports Using Device Manager

This is the quickest and easiest way to disable USB ports on Windows 11.

Press Windows + X and select Device Manager.
Expand the category Universal Serial Bus controllers.
You’ll see several entries like:
- USB Root Hub (USB 3.0)
- Generic USB Hub
- USB Host Controller
Right-click each entry and select Disable device.
Confirm by clicking Yes when prompted.

Your USB ports will now stop functioning. To re-enable them later, repeat these steps and select Enable device.

Tip: Don’t disable your mouse or keyboard if they are connected via USB. Otherwise, you’ll lose input access — use a PS/2 or Bluetooth device if needed.

Step 2: Disable USB Ports via the Registry Editor (Permanent Method)

If you want a more permanent or policy-level block, you can disable USB storage drivers via the Registry.

Warning: Editing the Registry incorrectly can cause system instability. Create a restore point before making changes.

Press Windows + R, type: regedit and press Enter.
Navigate to this path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR
On the right pane, double-click Start.
Change the Value data to 4, then click OK.

This disables the USB storage driver, blocking all USB drives from being recognized by Windows.

To re-enable later, change the value back to 3.

Note: This doesn’t disable keyboards, mice, or printers — only USB storage devices like flash drives and external hard drives.

Step 3: Disable USB Ports Using Group Policy Editor (For Pro & Enterprise Users)

If you’re running Windows 11 Pro or Enterprise, you can use the Group Policy Editor to control USB device access.

Press Windows + R, type: gpedit.msc and press Enter.
Navigate to: Computer Configuration → Administrative Templates → System → Removable Storage Access
On the right, double-click All Removable Storage classes: Deny all access.
Select Enabled, then click Apply → OK.

This completely disables all removable storage devices — including USB flash drives.

To allow them again later, set the policy back to Not Configured or Disabled.

Step 4: Disable Specific USB Ports Using BIOS/UEFI

You can disable USB ports at the hardware level through your BIOS or UEFI settings. This method is ideal for enterprise systems or shared PCs.

Restart your computer.
When the manufacturer logo appears, press the BIOS key (usually F2, DEL, or ESC).
Look for a menu option like Advanced, Integrated Peripherals, or I/O Ports.
Locate USB Configuration or USB Controller settings.
Set USB Ports or USB Controllers to Disabled.
Save and exit the BIOS (usually F10).

When you boot back into Windows, the USB ports will be completely disabled until you re-enable them from BIOS.

Step 5: Disable USB Storage via Command Prompt

You can also disable USB storage drivers using Command Prompt (a quicker version of the registry method).

Press Windows + S, type cmd, and select Run as administrator.
Type the following command and press Enter: reg add HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR /v Start /t REG_DWORD /d 4 /f
Close the Command Prompt and restart your PC.

Your USB storage ports will now be disabled.

To re-enable them later, run this command instead:

reg add HKLM\SYSTEM\CurrentControlSet\Services\USBSTOR /v Start /t REG_DWORD /d 3 /f

Step 6: Disable USB Ports via Power Management Settings

Windows sometimes allows USB devices to wake your PC or stay active in sleep mode. You can disable this to limit USB usage without blocking them entirely.

Press Windows + X and choose Device Manager.
Expand Universal Serial Bus controllers.
Right-click each USB Root Hub and choose Properties.
Go to the Power Management tab.
Uncheck Allow the computer to turn off this device to save power.

While this doesn’t disable the ports, it helps prevent them from automatically reactivating.

Step 7: Disable USB Ports via Security Software (Optional)

Many enterprise-grade antivirus and endpoint protection tools (like Bitdefender, Kaspersky, or McAfee) let you control USB port access.

If you’re managing multiple PCs, this might be the most scalable option — allowing you to enforce USB restrictions across all devices from a central console.

Check your security software’s settings for Device Control or Removable Media options.

Step 8: Re-enable USB Ports (When Needed)

If you want to restore USB functionality:

Device Manager: Right-click each USB entry → Enable device.
Registry: Change the USBSTOR value from 4 back to 3.
Group Policy: Set “Deny all access” to Disabled.
BIOS: Turn USB controllers back to Enabled.

Your USB ports will work again immediately after reboot.

Wrapping Up

Disabling USB ports on Windows 11 can be a smart move for security, compliance, or control. The Device Manager method is best for quick temporary disables, while Group Policy and Registry Editor provide more permanent or administrative-level restrictions.

If you’re managing multiple systems, using BIOS-level controls or enterprise security tools ensures that USB restrictions can’t be easily bypassed.

Once you’ve applied the right method, your PC will be protected from unauthorized USB access — giving you peace of mind whether it’s your home computer or an office workstation.