Disabling usb storage devices on windows XP

Disabling at BIOS:
Problem is your usb mouse/keyboard might not work.


Using gpedit:

Basically works well to prevent but only prevent for plug-before usb storage.
This one is same like u do manually in the regedit HKLM/CCS/Services/Usbstor/start value 4.
But gpedit will update periodically incase registry is changed by someone.

TIPS : use removeable device adm template which can donwnload at internet, import it by gpedit.msc, and when view PLEASE use "filter" and untick "ALL the RADIO button" otherwise you will see nothing in the right view of gpedit.msc

TROUBLE : when you plug a new-plug usb disk, it will change the "start" value to "3" and can be used after it automatically install the driver.

Tricks : Go to usbstor KEY and set permission to nothing can do anything, additionally also go to usbstor.sys file in \windows\system32\drivers and alter permission to nothing again.

In this point, the newly-plug usb device is detected but driver installation will fail. when you attach again next time the usb device will not be detected cause it is already plug-before usb device.