Hello,

I want to know that which component to remove for disabling the USB storage such as USB flash drive. Thanks much.

I don't know about nLite, but I came across this article here; it involves changes in the registry, so be careful. (Sorry about the commercials, for some strange reason they can never be left out, and it was not my purpose to advertise.)

Maybe it could be done through a reg file, but the article also describes other changes to files as well.

P.S. Looking through search, it came to my attention that most users require such a change for domain or company networks, so I hope this is not the case with you, as nLite is not licensed for commercial use.

http://www.msfn.org/board/index.php?showtopic=126922

We ended up not needing the functionality, but the usbstor.inf/pnf is the 'component' you are looking for. Removal proved far less effective than explicit denies and other usb devices like external cd/floppy drives still function

*and i never did figure out how to deploy that custom one unattended.

Edited May 27, 200917 yr by iamtheky

Microsoft provides explicit instructions in KB823732. I do not know the best method to accomplish this in an unattended manner, but it may be easiest to add the following line to nLite.inf in an AddReg section:

HKLM,"SYSTEM\CurrentControlSet\Services\UsbStor","Start",0x10001,4

It's also possible to create a simple addon to do this with using an entries*.ini file with the following contents:

Entries_DisableUSBStor.ini

[general];RVMi and nLite code
builddate=2009/06/08
description=Disable USBStor Addon
title=Disable USBStor Addon
website=http://www.msfn.org/board/index.php?showtopic=134396

[registry_addreg];nLite specific code
HKLM,"SYSTEM\CurrentControlSet\Services\UsbStor","Start",0x10001,4

Edited June 8, 200917 yr by 5eraph