I'm trying to lock down and secure some of my computers, and I've been able to disable USB Mass Storage. However, I can connect my phone and it still acts like a mass storage, but it uses the MTP protocol. I can't simply disable all USB ports, since I have USB keyboards and mice. I was given advice by a friend that the way he usually solves this issue is simply super gluing the USB ports shut. This sounds a bit extreme. What are my options?
Windows – How to disable MTP/PTP over USB in Windows 7
mtpusbwindows 7
Related Solutions
I am not a bash expert, but from USB standpoint you can't do this. A USB device is either the MTP class device, or Mass Storage class device.
If the device is MTP, host system needs MTP driver to operate it. File system is behind MTP wrapper.
If the device is Mass Storage, the system will load a mass storage driver.
Mobile phones used to have a manual option to change the USB mode of operation. More recently the Mass Storage option is not offered, because of high possibility of data corruption.
Of course, it is technically possible to have some proprietary switch protocol over USB to change the USB device class back and forth. To complete the switch, the device must disconnect from USB and them re-reconnect under new incarnation.
IF all the devices can installed and work properly on other Computer, let's try to reinstall USB hub driver to check the results:
Uninstalling USB Root Hubs: Uninstalling USB Root Hubs forces the system to reinstall the root hubs next time the computer is started. Use the following steps to uninstall USB Root Hubs:
- Disconnect all USB devices connected to the computer except a USB mouse and keyboard (if in use). This includes hubs, thumb drives, printers, and cameras.
- In Windows, search for and open Device Manager. The Device Manager window opens.
Double-click Universal Serial Bus Controllers to expand the list.
Right-click the first USB Root Hub in the list, then select Uninstall.
Click OK to confirm. Continue uninstalling all USB Root Hubs listed.
- Close Device Manager and restart the computer, the driver could be reinstalled automatically.
Also, to make sure if there is any corrupted system files related to this issue, run commands below to do the repair:
SFC /SCANNOW
Reconnect the USB device that was having problems and test it to see if it works when you connect your devices again.
Try to disable USB suspend feature:
Select the Start button, type power plan in the Search box, and then select Choose a power plan.
Next to your currently selected plan, select Change Plan Settings.
Select Change advanced power settings.
Select the box to expand USB Settings > USB selective suspend settings.
Select Plugged in, select the drop down menu, and then select disabled.
If you're using a laptop, select Battery, select the drop down menu, and then select disabled.
Select Apply > OK.
Best Answer
Try by setting the policy
WPD Devices: Deny read accesswithinSystem\Removable Storage Accessto "Enabled" and this should block all the portable devices.