Using registry editor:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
Changed the value of 'Start'
to '4' from '3'.HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor
However, I only managed to blocked usb storage devices that were already installed once, but new storage device will just install and become usable and reset the registry setting. (the registry value of 'Start' resets to '3')
How to restrict USB storage device
without affecting USB keyboard and mouse.
Introduction
Go through following steps to
restrict USB storage device access without affecting functional devices such as
mouse and keyboard.
1.Go to Group Policy Editor
By searching gpedit.msc on start menu and press enter.
2.Select Removable Storage Access
On popup window, go to Computer Configuration > Policies /
Administrative Templates > System > Removable Storage Access
Removable Disks: Deny execute
access
Removable Disks: Deny read access
Removable Disks: Deny write access
Test Now plug a storage device and try
to open, It cant proceed any action.