How to limit USB plugged into computer (only accept authorized USB)

Viruses and malware are one of the most annoying and dangerous things for people who use computers, as well as electronic devices that we are using every day.

Viruses often spread through many different ways, be it because you click on a link with malicious code, or because you visit a malicious website, or by a hacker attack, or it can also be caused by a virus. you plug a USB containing the virus into the computer.

Among them, USB is one of the most common sources of virus infection. Therefore, in this article, I will show you how to set up your computer to only accept certain USBs licensed by you, to ensure the safety of your computer.

Note: To apply, you must use Windows Pro version or higher, Home version will be limited to some settings!

Custom #1: Prevent all USB connections to the computer

If you don't use any USB-related peripherals, you can prevent all USBs from being connected to your computer for absolute safety.

Step 1: Press the Windows + R key combination to open the Run dialog box => then enter gpedit.msc => and press Enter to start the Local Group Policy Editor.

How to limit USB plugged into computer (only accept authorized USB) Picture 1

Step 2: Then, you access the following path:

Computer Configuration => Administrative Templates => System => Device Installation => Device Installation Restrictions.

How to limit USB plugged into computer (only accept authorized USB) Picture 2

Step 3: Then double-click on Prevent Installation of Removable Devices.

How to limit USB plugged into computer (only accept authorized USB) Picture 3

Step 4: You switch from Not Configured to Enabled state. Then click Apply => and OK to finish.

How to limit USB plugged into computer (only accept authorized USB) Picture 4

Custom #2: Only allow the computer to receive USB when using the Admin user

If you are a computer owner and you own an Admin account, there is a very OK way for you here. You can easily prevent non-Admin accounts (Guest) from having USB connection to the computer.

Read more: 3 ways to switch between User accounts in Windows

Step 1: You also access the Local Group Policy Editor as in Step 1 of part #1 above.

You find and double click on Allow Administrators to Override Device Installation Restriction as shown below.

How to limit USB plugged into computer (only accept authorized USB) Picture 5

Step 2: Switch from Not Configured to Enabled. Then click Apply => OK to finish.

How to limit USB plugged into computer (only accept authorized USB) Picture 6

Custom #3: Limit USB plugged into the computer (only accept authorized USB)

In case you only want the USB you licensed to be able to connect to your computer, set it up as follows:

First, plug the USB you want to license into the computer first, or in other words, put the USB on that 'white list' guys. Then you do the following:

Step 1: You go to Device Manager by pressing Windows + X key combination => then select Device Manager (if you are using Windows 10 or a later version)

Or you can open Device Manager by right-clicking on This PC => select Manage => then select Device Manager. This way you can apply to any version of Windows!.

For example, below I am licensing the computer mouse (you do this first).

How to limit USB plugged into computer (only accept authorized USB) Picture 7

Step 2: Next you find your USB, double click on it.

How to limit USB plugged into computer (only accept authorized USB) Picture 8

Step 3: Then go to the Details tab, in the Properties section, select Hardware Ids.

How to limit USB plugged into computer (only accept authorized USB) Picture 9

Step 4: Right-click on any of the IDs => then click Copy.

Similarly, to authorize a USB to be able to connect to the computer, you do the following:

How to limit USB plugged into computer (only accept authorized USB) Picture 10

Then copy any ID in the Value window.

How to limit USB plugged into computer (only accept authorized USB) Picture 11

Step 5: Go back to Local Group Policy Editor as instructed above => then find and double-click the option:

Allow installation of devices that match any of these device IDs.

How to limit USB plugged into computer (only accept authorized USB) Picture 12

Step 6: Now select Enabled => then click the Show. box below.

How to limit USB plugged into computer (only accept authorized USB) Picture 13

Step 7: In the Value box, Paste the ID you copied in Step 4 here.

If you still have other devices you want to add, just find the ID and continue to paste it in the boxes below. => after you are done, click OK to finish the setup process.

How to limit USB plugged into computer (only accept authorized USB) Picture 14

Step 8: Continue to click Apply => select OK to complete. For this setting to take effect, please restart your computer.

How to limit USB plugged into computer (only accept authorized USB) Picture 15

OK, so I've finished showing you how to set the limit of USB plugged into your computer, with this setup, your computer will only accept the USBs that you have authorized.

Hope this article will be useful to you, good luck 

Marvin Fry

Update 09 August 2021