How to limit USB plugged into computer (only accept authorized USB)

Viruses and malware are one of the most annoying and dangerous things for people who use computers, as well as electronic devices that we are using every day.

Viruses often spread through many different ways, be it because you click on a link with malicious code, or because you visit a malicious website, or by a hacker attack, or it can also be caused by a virus. you plug a USB containing the virus into the computer.

Among them, USB is one of the most common sources of virus infection. Therefore, in this article, I will show you how to set up your computer to only accept certain USBs licensed by you, to ensure the safety of your computer.

Note: To apply, you must use Windows Pro version or higher, Home version will be limited to some settings!

Custom #1: Prevent all USB connections to the computer

If you don't use any USB-related peripherals, you can prevent all USBs from being connected to your computer for absolute safety.

Step 1: Press the Windows + R key combination to open the Run dialog box => then enter gpedit.msc => and press Enter to start the Local Group Policy Editor.

Step 2: Then, you access the following path:

Computer Configuration => Administrative Templates => System => Device Installation => Device Installation Restrictions.

Step 3: Then double-click on Prevent Installation of Removable Devices.

Step 4: You switch from Not Configured to Enabled state. Then click Apply => and OK to finish.

Custom #2: Only allow the computer to receive USB when using the Admin user

If you are a computer owner and you own an Admin account, there is a very OK way for you here. You can easily prevent non-Admin accounts (Guest) from having USB connection to the computer.

Read more: 3 ways to switch between User accounts in Windows

Step 1: You also access the Local Group Policy Editor as in Step 1 of part #1 above.

You find and double click on Allow Administrators to Override Device Installation Restriction as shown below.

Step 2: Switch from Not Configured to Enabled. Then click Apply => OK to finish.

Custom #3: Limit USB plugged into the computer (only accept authorized USB)

In case you only want the USB you licensed to be able to connect to your computer, set it up as follows:

First, plug the USB you want to license into the computer first, or in other words, put the USB on that 'white list' guys. Then you do the following:

Step 1: You go to Device Manager by pressing Windows + X key combination => then select Device Manager (if you are using Windows 10 or a later version)

Or you can open Device Manager by right-clicking on This PC => select Manage => then select Device Manager. This way you can apply to any version of Windows!.

For example, below I am licensing the computer mouse (you do this first).

Step 2: Next you find your USB, double click on it.

Step 3: Then go to the Details tab, in the Properties section, select Hardware Ids.

Step 4: Right-click on any of the IDs => then click Copy.

Similarly, to authorize a USB to be able to connect to the computer, you do the following:

Then copy any ID in the Value window.

Step 5: Go back to Local Group Policy Editor as instructed above => then find and double-click the option:

Allow installation of devices that match any of these device IDs.

Step 6: Now select Enabled => then click the Show. box below.

Step 7: In the Value box, Paste the ID you copied in Step 4 here.

If you still have other devices you want to add, just find the ID and continue to paste it in the boxes below. => after you are done, click OK to finish the setup process.

Step 8: Continue to click Apply => select OK to complete. For this setting to take effect, please restart your computer.

OK, so I've finished showing you how to set the limit of USB plugged into your computer, with this setup, your computer will only accept the USBs that you have authorized.

Hope this article will be useful to you, good luck 

Marvin Fry

Update 09 August 2021