Sometimes there is a need to disable USB ports on a computer or laptop to limit access to connect flash drives, hard drives and other USB devices. Disable USB ports help prevent connection of any drives that can be used to steal important information or cause a computer to infect the computer with a virus and spread malicious software on the local network.

USB access restriction

Consider 7 waysWith which you can block USB ports:

1. Disable USB through the BIOS settings
2. Changing the registry settings for USB devices
3. Disable USB ports in Device Manager
4. USB Controller Drivers Uninstallation
5. Use Microsoft Fix IT 50061
6. Using additional programs
7. Physical shutdown USB ports

1. Disable USB ports through BIOS settings

1. Enter the BIOS settings.
2. Disconnect all items associated with USB controller (for example, USB Controller or Legacy USB Support).
3. After you have done these changes, you need to save the settings and exit BIOS. This is usually done using the key. F10..
4. Restart your computer and make sure that USB ports are disabled.

2. Enable and disable USB drives using the registry editor

If you do not fit through the BIOS, you can close access directly to the Windows OS itself using the registry.

The instruction below allows you to close access for various USB drives (for example, flash drives), but other devices, such as keyboards, mice, printers, scanners will still work.

1. Open the Start menu -\u003e Run, enter the command " regedit."And click OK to open the registry editor.
2. Go to the next section
   

   HKEY_LOCAL_MACHINE \\ SYSTEM \\ CURRENTCONTROLSET \\ SERVICES \\ USBSTOR

3. On the right side of the window, find the item " Start."And double-click on it to edit. Enter value " 4 »To block access to USB drives. Accordingly, if you enter again the value " 3 "Access will be open again.

Click the "OK" button, close the registry editor and restart the computer.

The method described above only when the USB controller driver is installed. If for security reasons, the driver has not been installed, the "Start" parameter value can be automatically reset to "3" when the user connects the USB and Windows drive will install the driver.

3. Disconnect USB ports in Device Manager

1. Right-click on the icon " A computer"And choose the" Properties "item in the context menu. A window will open in the left part of which you need to click on the link " Device Manager».
2. In the device dispatcher tree, find item " USB controllers"And open it.
3. Disconnect controllers by pressing the right mouse button and select the "Disable" menu item.

This method does not always work. In the example shown in the figure above, the disconnection of the controllers (2 first items) did not lead to the desired result. Disabling the 3rd point (USB storage device) worked, but it makes it possible to disable only a separate USB drive instance.

4. Deleting USB Controller Drivers

As an option for disconnecting ports, you can simply uninstall the USB controller driver. But the disadvantage of this method is that when you connect the USB drive, Windows will check the availability of drivers and in absence to install the driver. This in turn will open access to the USB device.

5. Bans User Connecting USB storage devices using Microsoft Applications

Another way to prohibit access to USB drives is the use of Microsoft Fix IT 50061 (http://support.microsoft.com/kb/823732/en - the link can be opened near Mitutu). The essence of this method is that 2 conditions for solving the problem are considered:

• USB drive has not yet been installed on a computer
• The USB device is already connected to the computer.

As part of this article, we will not consider this method in detail, especially since you can study it in detail on the Microsoft website using the reference above.

It should also be considered that this method is not suitable for all versions of Windows.

6. Using programs for disconnecting / enable access to USB storage devices

There are many programs to install access to USB ports. Consider one of them - the program USB DRIVE DISABLER..

The program has a simple set of settings that allow you to prohibit / allow access to certain drives. Also, USB Drive Disabler allows you to configure alerts and access levels.

7. Disable USB from the motherboard

Although the physical shutdown of USB ports on the motherboard is a practically impossible task, you can turn off the ports on the front or top of the computer case, disconnecting the cable going to the motherboard. This method will not completely close access to USB ports, but will reduce the likelihood of using the drives in inexperienced users and those who simply be lazy to connect devices to the rear of the system unit.

! Addition

Prohibition of access to removable media via Group Policy Editor

In modern versions of Windows, it is possible to limit access to removable storage devices (USB drives including) using the Local Group Policy Editor.

1. Launch gpedit.msc.through the "Run" window (Win + R).
2. Go to the next branch " Computer Configuration -\u003e Administrative Templates -\u003e System -\u003e Access to Removable Storage Devices»
3. On the right side of the screen, find the "Removable Discs: Disable Reading" item.
4. Activate this parameter ("Enable" position).

This section of the local group policy allows you to configure read, recording and execution for different classes of removable media.

By numerous requests, readers decided to write a detailed and simple instruction, how to reset the password from the user account in any version of Windows: 10, 8.1, 8, 7, XP.
So, you turned on the computer, and the system asks to enter a password to enter. You enter a user password, and it does not fit: an error "Invalid password" occurs. What to do, if no password is suitable, and you need to enter the system? There is a solution - the password can be reset using a special program recorded on the loading USB flash drive. Now I will tell you how to create such a flash drive.

You will need to take a long time to use anyone. other computer. To do this, contact a relative, a friend, a neighbor, maybe there is a computer at work - I think it is not a problem now.

So, sit down at another computer or laptop. Insert any flash drive to it:

Download the free Windows Password Reset Program. You can download it from the official site (or from my Yandex.Disk):

Run the downloaded file lsrmphdsetup.exe.: Install the program as usual: i.e. We agree with everyone and in all windows we click the button " Next". In the last installation window, press the button " FINISH"- The program will start automatically and its label will be created on the desktop:

In the starting window we click the button Burn Bootable CD / USB Disk Now! ("Burn boot CD / USB disk right now"):

In the next window select Windows versionwhich is installed on that computer where we will then drop the password. Not available Windows 10.but it's not scary: if you have a "dozen", then choose here Windows 8.1. With your discharge.

By the way, on one of the forums, I saw a message that you can create a bootable USB flash drive with Windows 8.1 64-bit, and it is suitable for resetting the password on any version of Windows (I checked on Windows 10 64-bit and on Windows 7 64-bit - so And there is):

After you have chosen the desired version of Windows - click the button " Next”:

In the next window, put the marker at the point USB Flash. and choose the letter of our flash drive (it is already inserted into the computer). In my case, the letter Flyers: F..
Then press the button " Start.”:

The program will download the necessary components from the Microsoft website for some time:

After that, the program will ask: " Format USB disk now?"All files, if they are on a flash drive, will be deleted. Click the button " Yes”:

Now we wait until the loading flash drive is created:

At the end of the process - click the button " FINISH”:

Everything! The loading flash drive with the password reset program is ready. Take it out and carry it on your computer.

Insert the bootable USB flash drive into your computer. And now the most important thing comes, and at the same time the most difficult for those who will do it for the first time, the moment. We need configure computer download from our flash drive .

Those who can upload a computer from a flash drive - can immediately move to the end of this article. For those who do not know how to boot from the flash drive, I will try to explain as clear as possible:

============================================================================================

In order to "force" the computer to boot not as usual (i.e. from the hard disk), and from the device you need (in our case - from the flash drive) - you need to enable a specific setting in BIOSE Computer.

To get into this very BIOS, we need immediately after turning on the computer to press a specific key on the keyboard (and click more than once, and many, many times until I see the BIOS on the screen).

On different computers and laptops, this key is different:

• Most often used key Delete. (or Del. ).
• Also often bios can be called up F2. (and on some laptops Fn + F2. ).
• The keys are less common ESC, F1, F6 other.

In general, immediately after you press the power button (POWER) on your computer or laptop, then do not wait until Windows load starts, and immediately begin to press many times on the key Delete. on keyboard. After a few seconds (5-10) on the screen should appear BIOS.

If nothing like this appeared, but started like the download of your Windows, then we don't expect anything else: rebooting our computer again (you can directly with the RESET button) and try to press many times the other key - F2..

If you again did not get into the BIOS - reboot the computer again and try to press the following key - ESC. Later F6. etc. But I hope you do not have to experiment so long: in the overwhelming majority of cases, or the Delete key is triggered or F2.

By the way, the hint about which key to download bios usually flashes at the bottom on the screen immediately after turning on the computer. But for some reason no one looks at her, or does not have time to consider.

On different computers BIOS Different, and he looks in different ways.

I have on my computer, for example, such:

On another computer, he will be like this:

On the third computer, such:
That is, I am talking to what to write a separate instruction to each bios is almost unrealistic.

The main thing is that anyone needs to be known to customize the download from the flash drive: in BIOS (as if he did not look like) you need to find a section where the word is present Boot (from English. "Download"). Turning through the arrows on the keyboard to this section - set first in the list of boot devices flash drive.

In the BIOS, the flash drive can be displayed with its own name (for example, Transcend.) or as USB-HDD.; There are other options. One thing is important: it must be selected as the first device from which the computer will be loaded..

Usually, the flash drive is "raised" to the first place with the arrow on the keyboard, or keys +/- either F5 / F6..

Having setting up the setup in Bios, we must leave it, not forgetting to save the changes made. To do this, go to the section EXIT. (he usually the very last) - and there choose the item " Save and EXIT."(" Save and exit "). And then confirm again that we leave by clicking " Yes”.

On this, everything: if you did everything right, the computer will reboot and the download will go from the flash drive (you need to press the Delete key again, or F2, or something else is not necessary!).

Many do not want to even communicate with the creation of a loading flash drive with any software, because They are afraid that still will not be able to adjust the computer download from it. I tried to describe the entire process of loading from the flash drive as it can more. If you caught this text, I hope it became a little more clear and now it remains to be practiced.

===============================================================================================================

So, I created a bootable flash drive on another computer with a password reset program. I insert this USB flash drive into my computer and turn it on.

Immediately, I make a lot of many times the key Delete. on keyboard. After a few seconds I get into BIOS.

I turn with the arrows on the keyboard in the section Boot (Although in my bios, you can work with the mouse - in the old versions of the bios will not work so).

Here I have the first device now hDD (Achi Po: WDC WD50 ...):
I highlight this line with the arrow on the keyboard and click the key ENTER. A list of devices from which you can boot are open. In my case, this is a hard drive and my flash drive (it is listed here twice). We raise the first place in the list - flash drive (If you have a choice: USB or UEFI, then select UEFI). We do it using the arrows on the keyboard, or keys +/- either F5 / F6.:

Now the flash drive in the first place in the list of boot devices:

Now we leave here, saving the changes. To do this, move the arrow on the keyboard on the last section EXIT.. Select line Save Changes and Exit - Click the key ENTER:

Then choose Yes:

After a while, the menu in which the key opens ENTER We choose item Lazesoft Live CD.:

We are waiting for the download:

In the next window, check the item is selected. RESET Windows Password. ("Windows Password Reset") and click the button Next:

The window will populate a message about the non-commercial use of the program - click Yes:

Podmame again Next:

In the next window select username, whose password will be reset and click Next:

Click on the button RESET / UNLOCK.:

Password Successfully dropped - click OK. Then FINISH:

Go to " Start"And Zhmem. Reboot Computer ("To restart a computer"):

Press OK:

After the computer reboots, we can log in Windows without password!

Good day Dear blog readers Website, today I want to tell how to delete data about USB flash drives in the Windows registry. This article is a continuation of the article. All information about any USB media ever connected to a computer is stored in the system registry. If there are many flash drives of different models and manufacturers to the computer, then a lot of garbage accumulates in the registry. As a result, the process of determining and connecting a new device begins to occupy a considerable time and inhibits the system.

Output one. You need to periodically clean the registry sections that store data on plug-in and other USB drives. Clearing these sections will speed up the connection of new USB devices and the operation of the system as a whole.

Cleaning should be done using the REGEDIT system program. She starts like this.
Start - Run - Regedit

Registry sections storing data about any USB drive ever connected to PCs - flash drives, external hard drives, as well as cameras, telephones, flash players and other devices that, when connected to a PC, are recognized as an external USB drive. Here you can delete all subsections with the DISC prefix.

HKEY_LOCAL_MACHINE \\ SYSTEM \\ CURRENTCONTROLSET \\ ENUM \\ USBSTOR
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CONTROLSET001 \\ ENUM \\ USBSTOR
HKEY_LOCAL_MACHINE \\ SYSTEM \\ CONTROLSET002 \\ ENUM \\ USBSTOR

From the screenshots it is clear that the hubs and HDDs also connected through the hub

If you do not want to clean in manual, that is, both free software, for example, USB Oblivion. Run the utility

Put a check box to make real cleaning

We see that everything has been completed and many registry entries were removed. Check the registry. Please note that the USBSTOR folder is not.

Well, on the track, let's see the USBDEView program, everything is also clean.

Here are dear readers where data is stored about your flash drives, so if, something you need to delete, then start.

To reserve Internet connections, I use the 3G Huawei E173 modem connected to the USB port of the router. The connection through it is always raised in the hot reserve mode (to switch to the modem it is enough to reset Default Route from the main connection). But there is one problem - periodically the modem "freezes" and the connection is lost.

As a rule, it is enough to restart pppd, but yesterday the modem stopped reacting at all. The logs appeared in the log, which relate to the problems rather hardware.

Xhci_hcd 0000: 02: 00.0: WARN EVENT TRB FOR SLOT 1 EP 4 WITH NO TDS QUEUED? xhci_hcd 0000: 02: 00.0: WARN EVENT TRB FOR SLOT 1 EP 4 WITH NO TDS QUEUED? xhci_hcd 0000: 02: 00.0: WARN EVENT TRB FOR SLOT 1 EP 4 WITH NO TDS QUEUED? xhci_hcd 0000: 02: 00.0: Error Transfer Event TR DMA PTR NOT Part of Current TD Xhci_hcd 0000: 02: 00.0: Error Transfer Event TRB DMA PTR NOT Part of Current TD Xhci_hcd 0000: 02: 00.0: Error Transfer Event TRB DMA PTR NOT Part of Current TD
The restart of PPPD did not give anything, it seems that the modem does not respond to any command.

Apr 24 10:02:11 Inet Chat: ABORT ON (\\ Nbusy \\ r) Apr 24 10:02:11 Inet Chat: ABORT ON (\\ Nerror \\ R) Apr 24 10:02:11 Inet Chat: ABORT ON INET CHAT: ABORT ON (\\ Nringing \\ R \\ N \\ R \\ Nringing \\ R) Apr 24 10:02:11 Inet Chat: Send (^ Mat ^ M) Apr 24 10:02:11 Inet Chat: Timeout Set to 12 SECONDS APR 24 10:02:11 INET CHAT: EXPECT (OK) Apr 24 10:02:23 Inet Chat: Alarm Apr 24 10:02:23 Inet Chat: Failed
Attempts to reornetize the modem programmatically not crowned with success, since its device (/ dev / ttyusb0) does not respond to AT commands. It remains only to disable and turn on the modem to the port. But first I decided to try the method on which I came across recently on the Internet.

To reset the desired USB bus, we need to compile the binary. In order not to compile it every time again and use it in almost any car, I will compile it statically.

$ wget https://gist.githubuserconent.com/x2q/5124616/raw -o USBREST.C $ GCC -Wall -Static -o USBELESET USBREST.C $ sudo install -o root -g root -m 0755 USBRESET / USR / Local / Sbin $ lsusb | Grep Huawei Bus 001 Device 002: ID 12D1: 1001 Huawei Technologies Co., Ltd. E169 / E620 / E800 HSDPA Modem $ Sudo USBERESET / DEV / BUS / USB / 001/002 ERROR IN IOCTL: No Such Device
Despite the error in the log, records indicating the "reboot" of the modem appeared.

$ dmesg | Tail USB 1-6: NEW USB Device Strings: MFR \u003d 3, Product \u003d 2, SerialNumber \u003d 0 USB 1-6: Product: Huawei Mobile USB 1-6: Manufacturer: Huawei Technology USB 1-6: Configuration # 1 Chosen From 1 Choice Option 1-6: 1.0: GSM Modem (1-PORT) Converter Detected USB 1-6: GSM Modem (1-Port) Converter Now Attached to TTYUSB0 Option 1-6: 1.1: GSM Modem (1-PORT) Converter Detected USB 1-6: GSM Modem (1-Port) Converter Now Attached to TTYUSB1 Option 1-6: 1.2: GSM Modem (1-PORT) Converter Detected USB 1-6: GSM Modem (1-Port) Converter Now Attached To Ttyusb2.
Let's try to connect to it and execute several AT commands.

The device (modem), which really went. Sometimes it works great, but in other cases it refuses to connect. The only solution I found to fix it when it enters a bad state is to physically disable the device and connect it back. However, I do not always have physical access to the computer in which it is connected, M is looking for a way to do it through the command line.

This article assumes the launch:

$ sudo modprobe -w -r USB_STORAGE; Sudo Modprobe USB_Storage

However, I get a "unknown version -w". This slightly modified command:

$ sudo modprobe -r usb_storage

Fatal message error: USB_storage module is used. If I try to kill -9 processes marked before launching, they refuse to die (I think, because they are strongly tied to the kernel).

Does anyone know how to do it?

NOTE. I crossed it on the server, as I did not know what it would be more appropriate. I will delete and / or contact those whom will be answered first.

5 SOLUTIONS Collect Form Web for "USB hard reset in Ubuntu 10.04"

I have Ubuntu 14.04.4. I have no idea if it works at 10.04. I tested it on a Cyborg Rumble Pad (and a universal USB drive).

Immediately after connecting the device:

Dmesg | Grep USB | Tail -n 20.

I get (perhaps, by the way):

[2875.790610] USB 2-1.2: New Full-Speed \u200b\u200bUSB Device Number 7 using EHCI-PCI [2875.887485] USB 2-1.2: NEW USB Device Found, iDvendor \u003d 0738, IDPRODUCT \u003d CB02 [2875.887489] USB 2-1.2: NEW USB Device Strings: MFR \u003d 1, Product \u003d 2, SerialNumber \u003d 3 [2875.887490] USB 2-1.2: Product: Cyborg Rumble Pad - PC / Xbox 360 [2875.887492] USB 2-1.2: Manufacturer: Saitek [2875.887493] USB 2-1.2 : SerialNumber: 0CFE6B97

2-1.2 Part - line 2-1.2. It defines the USB port. The good news is that it should not change if I do not connect the device to another port, so I need to get a string only once.

Then I go to the right place:

CD / SYS / BUS / USB / DRIVERS / USB

And call like root. (for example, Sudo Bash):

ECHO 2-1.2\u003e Unbind; SLEEP 3; Echo 2-1.2\u003e Bind

As a result, my Rumble Pad initializes itself as if it were turned on and again. I also tested my USB drive. He (his LED) behaves as if nothing happened, but my KDE reacts and asks if I want to mount.

All time power device. This method will not work if your modem is reset due to lack of nutrition.

You are just looking for a device you want to reset (LSUSB):

# Lsusb bus 005 Device 004: ID 0951: 1642 Kingston Technology DT101 G2

And then:

# USBERESET / DEV / bus / USB / 005/004

Why are you trying to unload the USB_STORAGE module when your device is a USB modem?

Sudo LSHW And locate the entry for your USB modem. There must be configuration: a string like this (your driver will differ obviously):

Configuration: ... Driver \u003d IWLAGN ...

Make sure the module is loaded (substituting the correct driver name):

Lsmod | GREP IWLAGN.

That's just follow:

Sudo Modprobe -R IWLAGN && SLEEP 2 && Sudo Modprobe IWLAGN

I like Sleep there just in case the device takes some time to turn off the power.

This is the "output" solution, but it can work.

• Get the second, old, not very powerful PC. Install Debian on it. Install USBIP on it.
• Then install USBIP to your server.
• Connect the modem to the second PC. Configure USBIP on both machines so that the modem connected to the second PC is available via VHCI from the server.
• Configure SSH on a second PC or on other tools that you can delete to it and issue commands.
• When the device fails, log in and restart the second computer using the reboot command, and then when it returns, connect to any tools, USBIP provides USBIP (I never used USBIP). This should lead to a disposal of the device. Probably you could write it.

The easiest way to disable arbitrary USB devices from the command line (i.e. with a real power cycle to USB):

1. Buy 4-port USB concentrator DELOCK 87445 (Google for )
2. This hardware is compatible with Hub-Ctrl.c (Google for ). Therefore, arbitrary ports can be turned on / off. For more information, see also at :.