Thread: Tutorial: How to enable USB drives

Domain administrators disable USB drives in the company. While there are valid reasons to do so sometimes this is a genuine problem to many. This step by step guide tells you how to enable USB drives.

This procedure is for Windows/XP only. You need local administrator privileges on your PC.

Note: If you follow the procedure in exact reverse order, you can disable USB drives on your PC.

Step 1: Enable access to USB driver files (.inf/.pnf)

1. From the 'Start' menu, click on 'Run' (Start --> Run). Enter 'c:\windows\inf'. Click on 'OK'.
   
   USB-Enable-01.png
2. The File Explorer will open 'C:\Windows\inf' folder. Do as said in the picture below.
   
   USB-Enable-02.png
3. In the properties window, do as stated in the picture below.
   
   USB-Enable-03.png
4. Add 'Everyone' to the list.
   
   USB-Enable-04.png
   USB-Enable-05.png

Step 2: Enable USB in registry
(Continues in next post ...)

Step 1: Enable access to USB driver files (.inf/.pnf)
(... from previous post)

Step 2: Enable USB in registry
Now that you have enabled the access to the USB drivers, the next step is to enable the USB access in the windows registry.

1. From the windows 'Start' menu, start the 'regedit' program
   (Start --> Run --> regedit --> <ENTER>)
2. From the registry editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\SERVICES as shown in the picture below.
   
   USBSTOR-01.png
3. Open the key 'USBSTOR'
   
   USBSTOR-02.png
4. Check the value of the 'Start' key. It should be '3'. If the value is not '3', double click it to edit its value.
   
   USBSTOR-03.png
5. Set the value as '3' and click 'OK'.
   
   USBSTOR-04.png

You are all set now.

Please rate this article. Repo's not expected.

Good info but normally in domain environment users may may not have local administrator privileges.

Yes and No.

I work in a corporate. But I do have admin rights on my laptop. Every day USB gets disabled on my laptop.

In gpedit.msc also some settings to block removable data storage devices. not remebering.

Good one

Rated

Ek dum 5 ***** rated thread..kixxi...

Good info kix. .. keep them coming

As stated above, there are two steps. No one asked the importance or utility of step 1.

Step 2 is enough to enable (or disable) USB. So why do domain admins also do?

They disable the access to the drivers. Usually all USB drives are PnP (plug and play). When a USB stick is inserted into the USB port, Windows checks for the associated and the correct driver file for the device. It will go to USBSTOR.inf and USBSTOR.pnf to discover the device driver.

Now if the access to the two files is disabled for the logged in user, then the driver for the USB device cannot be loaded, let alone enabled or disabled. That is why it is important to grant the access to those files.

Scenarios
a) You had two USB drives - one made by Transcend and other by Kingston.
b) Your PC is domain controlled in your office
c) The domain admin continuously run remote scripts on your machine thereby disabling .inf/.pnf access and disable USB in registry.
d) You have admin rights on PC

Scene 1: You insert the Transcend drive the VERY FIRST time
a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable.
b) You do not follow one or both of the steps. Result: FAILURE. Your drive will NOT be usable.
c) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

Scene 2: You insert the Transcend drive next time
a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable.
b) You follow step 1 but not step 2. Result: FAILURE. Your drive will not be usable.
c) You do not follow step 1 but follow step 2. Result: SUCCESS. Your drive will be usable. This is because the actual driver file (.sys) is already loaded in the \windows\system32 folder.
d) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

Scene 3: You insert the Kingston drive the first time
a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable.
b) You follow step 1 but not step 2. Result: FAILURE. Your drive will not be usable. But the driver file will be loaded in the \windows\system32 folder.
c) You do not follow step 1 but follow step 2. Result: MIXED. If the actual driver file (.sys) is already loaded in the \windows\system32 folder then your drive will work, else not.
d) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

the reason for mixed failure in case of some pen drives is that when you first use an USB on any computer then just for that first time windows initiate a new hardware found wizard to load particular driver file for that drive.once this process is over whenever you will insert that pen drive again step 1 is not necessary.you can see it by opening usbstor.inf file in notepad.it is also possible to remove a selected drive,say,sony by deleting particular lines from this inf file before any sony drive has ever been connected to the PC & after doing this i think even after doing step 1&2 you won't be able to use sony drive on that particular PC.also to further complicate the matters one can assign special domain level write privileges on this inf file to restrict user from editing this inf file even if they do have admin rights on their PC.

P.S.how about giving this suggestion to your network admins just4kix!just kidding

@whitestar_999, regarding your suggestion. You must be kidding big time.

don't worry just4kix!i don't think any network admin is going to take so much trouble unless he has a grudge towards pen drives.anyway just keep my previous post handy.who knows you might need it yourself in near future?

hey i just checked manufacturers list in usbstor.inf & there was no name for transcend or kingston. i assume this list inserted by windows. then how come it allows other drives like transcend or kingston? i was expecting their names atleast somewhere in whole .inf.

For unlisted drives, it first load the generic USB driver and then searches the proper driver in the special (system) folder of the USB stick.

Nice piece of work alongwith screenshots good job:thumbup:

@just4kix

The steps which u mentioned is the exact process what i'm doing in our office. nice and surprised to see it posted here. really usefull tips for many.

P.s: the step 2 is not necessary in my company.(enabling in registry). i only do the step 1 and get the access.

good info j4k.............
u rock!

Sometimes, inspite of the above methods, a new USB mass storage device cannot be installed. This is because access to 'usbstor.inf / usbstor.pnf' has been permanently disabled. No amunt of admin priveleges can make the access possible.

In this case, login in safe mode as local administrator. Plug in the device. You should now be able to install the new USB device.

best way is Bribe your admin :P

best way to go flash on admined compy,... thanks j4k..

Originally Posted by talktoanil

best way is Bribe your admin :P

Or arrange a "contract" on him/her.

Thanks, mickey.

Provided Good Info.

Really a great thanks for the post.I will definitely try this at my office ,as they have blocked the USB mass storage.

I have done both the steps still my USB is not working