Disable USB Ports By Disabling Autorun
Most of the malware that spreads through USB devices spreads because of the
Autorun feature which automatically executes a said file mentioned in the
autorun.inf file located at the root of the USB device folder tree. Something as unsuspicious as “
Open folder to view files”
to the untrained eye can be easily made to run any desired file on the
drive and can thus infect your computer. So disabling autorun is always
one of the better options. To do so:
- First, the key combination Win + R and type Gpedit.msc
- Navigate to Computer Configuration > Administrative Templates > Windows Components, then click Autoplay Policies. (XP users should try Computer Configuration > Administrative Templates > System
- In the Details pane, double-click Turn off Autoplay.
- Click Enabled, select All drives in the Turn off Autoplay box to disable Autorun on all drives.
Microsoft Help and Support has
more details and methods
Option 1. Disable users from connecting USB devices