Will disabling thumb drives also affect the use of the keyboard and mouse?

Ask the Expert

Will disabling thumb drives also affect the use of the keyboard and mouse?

How do you disable the use of thumb drives on newer desktop computers that only have USB connections for the keyboard and mouse? I read your recent response concerning USB threats to organizations, and the solutions in your original response would appear to disable these input devices and prevent use of the computer.

Continue Reading This Article

Enjoy this article as well as all of our content, including E-Guides, news, tips and more.

That's a really good question. This is a major bummer for organizations who would like to shut down USB devices altogether, but are stuck with systems that rely exclusively on USB for keyboard and mouse. So, what to do?

The good news here is that Microsoft uses a separate set of drivers for USB keyboard and mouse devices than it does for USB storage drives. Thus, you can use Group Policy to disallow storage drivers from being loaded, while still enabling keyboard and mouse use. There is a wonderful article on how to disable USB devices by Hannes Schmidt.

More information:

  • Read Ed's previous response: Do USB memory sticks pose enterprise threats?
  • Are the contents of your USB token being copied to a hidden directory called "iedw." If so, Ed explains what you should do next.
  • This was first published in April 2007