India Broadband Forum

just4kix · 06-13-09, 11:51 AM

Domain administrators disable USB drives in the company. While there are valid reasons to do so sometimes this is a genuine problem to many. This step by step guide tells you how to enable USB drives.

This procedure is for Windows/XP only. You need local administrator privileges on your PC.

Note: If you follow the procedure in exact reverse order, you can disable USB drives on your PC.

Step 1: Enable access to USB driver files (.inf/.pnf)

From the 'Start' menu, click on 'Run' (Start --> Run). Enter 'c:\windows\inf'. Click on 'OK'.

USB-Enable-01.png
The File Explorer will open 'C:\Windows\inf' folder. Do as said in the picture below.

USB-Enable-02.png
In the properties window, do as stated in the picture below.

USB-Enable-03.png
Add 'Everyone' to the list.

USB-Enable-04.png
USB-Enable-05.png

Step 2: Enable USB in registry
(Continues in next post ...)

just4kix · 06-13-09, 11:52 AM

Step 1: Enable access to USB driver files (.inf/.pnf)
(... from previous post)

Step 2: Enable USB in registry
Now that you have enabled the access to the USB drivers, the next step is to enable the USB access in the windows registry.

From the windows 'Start' menu, start the 'regedit' program
(Start --> Run --> regedit --> <ENTER>)
From the registry editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\SERVICES as shown in the picture below.

USBSTOR-01.png
Open the key 'USBSTOR'

USBSTOR-02.png
Check the value of the 'Start' key. It should be '3'. If the value is not '3', double click it to edit its value.

USBSTOR-03.png
Set the value as '3' and click 'OK'.

USBSTOR-04.png

You are all set now.

just4kix · 06-13-09, 12:05 PM

Please rate this article. Repo's not expected.

sujithsukrutham · 06-13-09, 01:16 PM

Good info but normally in domain environment users may may not have local administrator privileges.

just4kix · 06-13-09, 06:39 PM

Yes and No.

I work in a corporate. But I do have admin rights on my laptop. Every day USB gets disabled on my laptop.

sujithsukrutham · 06-13-09, 07:06 PM

In gpedit.msc also some settings to block removable data storage devices. not remebering.

06-13-09, 08:51 PM

Good one

Rated

Mr.Tooth Fairy · 06-13-09, 10:23 PM

Ek dum 5 ***** rated thread..kixxi...

06-13-09, 11:43 PM

Good info kix. .. keep them coming

just4kix · 06-14-09, 11:18 AM

As stated above, there are two steps. No one asked the importance or utility of step 1.

Step 2 is enough to enable (or disable) USB. So why do domain admins also do?

They disable the access to the drivers. Usually all USB drives are PnP (plug and play). When a USB stick is inserted into the USB port, Windows checks for the associated and the correct driver file for the device. It will go to USBSTOR.inf and USBSTOR.pnf to discover the device driver.

Now if the access to the two files is disabled for the logged in user, then the driver for the USB device cannot be loaded, let alone enabled or disabled. That is why it is important to grant the access to those files.

Scenarios
a) You had two USB drives - one made by Transcend and other by Kingston.
b) Your PC is domain controlled in your office
c) The domain admin continuously run remote scripts on your machine thereby disabling .inf/.pnf access and disable USB in registry.
d) You have admin rights on PC

Scene 1: You insert the Transcend drive the VERY FIRST time
a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable.
b) You do not follow one or both of the steps. Result: FAILURE. Your drive will NOT be usable.
c) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

Scene 2: You insert the Transcend drive next time
a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable.
b) You follow step 1 but not step 2. Result: FAILURE. Your drive will not be usable.
c) You do not follow step 1 but follow step 2. Result: SUCCESS. Your drive will be usable. This is because the actual driver file (.sys) is already loaded in the \windows\system32 folder.
d) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

Scene 3: You insert the Kingston drive the first time
a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable.
b) You follow step 1 but not step 2. Result: FAILURE. Your drive will not be usable. But the driver file will be loaded in the \windows\system32 folder.
c) You do not follow step 1 but follow step 2. Result: MIXED. If the actual driver file (.sys) is already loaded in the \windows\system32 folder then your drive will work, else not.
d) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

whitestar_999 · 06-14-09, 10:17 PM

the reason for mixed failure in case of some pen drives is that when you first use an USB on any computer then just for that first time windows initiate a new hardware found wizard to load particular driver file for that drive.once this process is over whenever you will insert that pen drive again step 1 is not necessary.you can see it by opening usbstor.inf file in notepad.it is also possible to remove a selected drive,say,sony by deleting particular lines from this inf file before any sony drive has ever been connected to the PC & after doing this i think even after doing step 1&2 you won't be able to use sony drive on that particular PC.also to further complicate the matters one can assign special domain level write privileges on this inf file to restrict user from editing this inf file even if they do have admin rights on their PC.

P.S.how about giving this suggestion to your network admins just4kix!just kidding

just4kix · 06-15-09, 10:17 AM

@whitestar_999, regarding your suggestion. You must be kidding big time.

whitestar_999 · 06-15-09, 10:34 PM

don't worry just4kix!i don't think any network admin is going to take so much trouble unless he has a grudge towards pen drives

.anyway just keep my previous post handy.who knows you might need it yourself in near future?

Logik · 06-19-09, 04:24 PM

hey i just checked manufacturers list in usbstor.inf & there was no name for transcend or kingston. i assume this list inserted by windows. then how come it allows other drives like transcend or kingston? i was expecting their names atleast somewhere in whole .inf.

just4kix · 06-19-09, 04:56 PM

For unlisted drives, it first load the generic USB driver and then searches the proper driver in the special (system) folder of the USB stick.

Vasundra · 08-06-09, 11:41 AM

Nice piece of work alongwith screenshots good job

inba · 09-14-09, 05:06 PM

@just4kix

The steps which u mentioned is the exact process what i'm doing in our office. nice and surprised to see it posted here. really usefull tips for many.

P.s: the step 2 is not necessary in my company.(enabling in registry). i only do the step 1 and get the access.

imrock · 09-15-09, 04:15 PM

good info j4k.............

u rock!

just4kix · 10-05-09, 11:46 AM

Sometimes, inspite of the above methods, a new USB mass storage device cannot be installed. This is because access to 'usbstor.inf / usbstor.pnf' has been permanently disabled. No amunt of admin priveleges can make the access possible.

In this case, login in safe mode as local administrator. Plug in the device. You should now be able to install the new USB device.

talktoanil · 10-07-09, 03:05 PM

best way is Bribe your admin :P

06-13-09, 11:51 AM	#1
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	Tutorial: How to enable USB drives Domain administrators disable USB drives in the company. While there are valid reasons to do so sometimes this is a genuine problem to many. This step by step guide tells you how to enable USB drives. This procedure is for Windows/XP only. You need local administrator privileges on your PC. Note: If you follow the procedure in exact reverse order, you can disable USB drives on your PC. Step 1: Enable access to USB driver files (.inf/.pnf) From the 'Start' menu, click on 'Run' (Start --> Run). Enter 'c:\windows\inf'. Click on 'OK'. USB-Enable-01.png The File Explorer will open 'C:\Windows\inf' folder. Do as said in the picture below. USB-Enable-02.png In the properties window, do as stated in the picture below. USB-Enable-03.png Add 'Everyone' to the list. USB-Enable-04.png USB-Enable-05.png Step 2: Enable USB in registry (Continues in next post ...) __________________ * Never argue with an idiot * To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. \| To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. \| To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts. -------------------------------------------------------------------------------------------

06-13-09, 11:52 AM	#2
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	How to enable USB drives - Part 2 Step 1: Enable access to USB driver files (.inf/.pnf) (... from previous post) Step 2: Enable USB in registry Now that you have enabled the access to the USB drivers, the next step is to enable the USB access in the windows registry. From the windows 'Start' menu, start the 'regedit' program (Start --> Run --> regedit --> <ENTER>) From the registry editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\SERVICES as shown in the picture below. USBSTOR-01.png Open the key 'USBSTOR' USBSTOR-02.png Check the value of the 'Start' key. It should be '3'. If the value is not '3', double click it to edit its value. USBSTOR-03.png Set the value as '3' and click 'OK'. USBSTOR-04.png You are all set now.

06-15-09, 10:34 PM	#13
whitestar_999 Platinum Member Join Date: Jan 2008 Location: UP(west) Posts: 1,971 Blog Entries: 1 Rep Power: 3	don't worry just4kix!i don't think any network admin is going to take so much trouble unless he has a grudge towards pen drives.anyway just keep my previous post handy.who knows you might need it yourself in near future?

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
A warning to all seagate hard drives users and buyers	The Sorcerer	Desktop Computer	50	07-11-09 03:30 PM
how to raid hard drives	sruthinmn	Windows	13	01-09-09 10:48 PM
How to Hide the drives(c:,d:,e:,a:...etc) in My Computer	smoothvibes	Computer hardware and software tips and tricks	1	10-27-08 12:34 AM
Laptop Flash Drives faces major problems	Guest	News from the Tech and IT World	0	09-06-08 12:51 PM
LF-MB121JD: Matsushita Electric Blu-Ray drives coming in June	India Broadband Internet	News from the Tech and IT World	0	04-22-06 06:03 AM

06-13-09, 12:05 PM	#3
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	Please rate this article. Repo's not expected.

06-13-09, 01:16 PM	#4
sujithsukrutham Gold Member Join Date: Jun 2008 Location: Where I am Posts: 579 Rep Power: 5	Good info but normally in domain environment users may may not have local administrator privileges.

06-13-09, 06:39 PM	#5
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	Yes and No. I work in a corporate. But I do have admin rights on my laptop. Every day USB gets disabled on my laptop.

06-13-09, 07:06 PM	#6
sujithsukrutham Gold Member Join Date: Jun 2008 Location: Where I am Posts: 579 Rep Power: 5	In gpedit.msc also some settings to block removable data storage devices. not remebering.

06-13-09, 08:51 PM	#7
meetdilip Guest Posts: n/a	Good one Rated

06-13-09, 10:23 PM	#8
Mr.Tooth Fairy Platinum Member Join Date: Aug 2008 Location: oral cavity:D Posts: 1,546 Rep Power: 5	Ek dum 5 ***** rated thread..kixxi...

06-13-09, 11:43 PM	#9
kirankumargb Guest Posts: n/a	Good info kix. .. keep them coming

06-14-09, 11:18 AM	#10
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	As stated above, there are two steps. No one asked the importance or utility of step 1. Step 2 is enough to enable (or disable) USB. So why do domain admins also do? They disable the access to the drivers. Usually all USB drives are PnP (plug and play). When a USB stick is inserted into the USB port, Windows checks for the associated and the correct driver file for the device. It will go to USBSTOR.inf and USBSTOR.pnf to discover the device driver. Now if the access to the two files is disabled for the logged in user, then the driver for the USB device cannot be loaded, let alone enabled or disabled. That is why it is important to grant the access to those files. Scenarios a) You had two USB drives - one made by Transcend and other by Kingston. b) Your PC is domain controlled in your office c) The domain admin continuously run remote scripts on your machine thereby disabling .inf/.pnf access and disable USB in registry. d) You have admin rights on PC Scene 1: You insert the Transcend drive the VERY FIRST time a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable. b) You do not follow one or both of the steps. Result: FAILURE. Your drive will NOT be usable. c) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable. Scene 2: You insert the Transcend drive next time a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable. b) You follow step 1 but not step 2. Result: FAILURE. Your drive will not be usable. c) You do not follow step 1 but follow step 2. Result: SUCCESS. Your drive will be usable. This is because the actual driver file (.sys) is already loaded in the \windows\system32 folder. d) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable. Scene 3: You insert the Kingston drive the first time a) You do not follow step 1 and step 2. Result: FAILURE. Your drive will NOT be usable. b) You follow step 1 but not step 2. Result: FAILURE. Your drive will not be usable. But the driver file will be loaded in the \windows\system32 folder. c) You do not follow step 1 but follow step 2. Result: MIXED. If the actual driver file (.sys) is already loaded in the \windows\system32 folder then your drive will work, else not. d) You follow step 1 and step 2. Result: SUCCESS. Your drive will be usable.

06-14-09, 10:17 PM	#11
whitestar_999 Platinum Member Join Date: Jan 2008 Location: UP(west) Posts: 1,971 Blog Entries: 1 Rep Power: 3	the reason for mixed failure in case of some pen drives is that when you first use an USB on any computer then just for that first time windows initiate a new hardware found wizard to load particular driver file for that drive.once this process is over whenever you will insert that pen drive again step 1 is not necessary.you can see it by opening usbstor.inf file in notepad.it is also possible to remove a selected drive,say,sony by deleting particular lines from this inf file before any sony drive has ever been connected to the PC & after doing this i think even after doing step 1&2 you won't be able to use sony drive on that particular PC.also to further complicate the matters one can assign special domain level write privileges on this inf file to restrict user from editing this inf file even if they do have admin rights on their PC. P.S.how about giving this suggestion to your network admins just4kix!just kidding

06-15-09, 10:17 AM	#12
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	@whitestar_999, regarding your suggestion. You must be kidding big time.

06-19-09, 04:24 PM	#14
Logik Gold Member Join Date: Jan 2008 Location: On Internet Posts: 680 Rep Power: 5	hey i just checked manufacturers list in usbstor.inf & there was no name for transcend or kingston. i assume this list inserted by windows. then how come it allows other drives like transcend or kingston? i was expecting their names atleast somewhere in whole .inf.

06-19-09, 04:56 PM	#15
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	For unlisted drives, it first load the generic USB driver and then searches the proper driver in the special (system) folder of the USB stick.

08-06-09, 11:41 AM	#16
Vasundra Bronze Member Join Date: Jul 2009 Age: 25 Posts: 282 Rep Power: 1	Nice piece of work alongwith screenshots good job

09-14-09, 05:06 PM	#17
inba Junior Member Join Date: Oct 2008 Location: chennai/pondicherry Posts: 55 Rep Power: 2	@just4kix The steps which u mentioned is the exact process what i'm doing in our office. nice and surprised to see it posted here. really usefull tips for many. P.s: the step 2 is not necessary in my company.(enabling in registry). i only do the step 1 and get the access.

09-15-09, 04:15 PM	#18
imrock Gold Member Join Date: Sep 2008 Posts: 748 Rep Power: 3	good info j4k............. u rock!

10-05-09, 11:46 AM	#19
just4kix Platinum Member Join Date: Dec 2007 Location: Pune Posts: 8,899 Blog Entries: 6 Rep Power: 19	Sometimes, inspite of the above methods, a new USB mass storage device cannot be installed. This is because access to 'usbstor.inf / usbstor.pnf' has been permanently disabled. No amunt of admin priveleges can make the access possible. In this case, login in safe mode as local administrator. Plug in the device. You should now be able to install the new USB device.

10-07-09, 03:05 PM	#20
talktoanil Gold Member Join Date: May 2008 Location: Dombivi Age: 25 Posts: 587 Rep Power: 2	best way is Bribe your admin :P

India Broadband Forum

Tutorial: How to enable USB drives

Tutorial: How to enable USB drives

Similar Threads