You can never be too careful about keeping your company data safe. Disabling USB ports is a great way to protect devices from viruses and other vulnerabilities. When necessary you can re-enable USB ports. One of the best and most effective ways to do this on Windows devices is to disable ports from the registry. This change can be made only by admin users, so even your employees will not be able to change it at will.
How to do it
Step 1
From the Start menu, open the Run dialogue box or you can press the 'Windows + R' key to open the Run window.
Step 2
Type "regedit.exe" and press Enter to open the Registry Editor.
Passage 3
The Registry Editor window will open, navigate to the following path:
HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Services > USBSTOR
Passage 4
Click on the start option to open the "Edit DWORD value (32-bit)" window.
A) To disable USB ports or drives, change the "value data" to "4" and then click OK.
B) To enable USB drives or ports, change the value to '3' and then click OK
Passage 5
Restart your laptop or PC to see the effects.