# How to Manage USB Access (Block/Allow)

Overview

The USB Access feature gives you control over the physical USB ports on your managed devices. You can create policies to essentially "lock down" computers by blocking all USB storage devices (flash drives, external hard drives) while still allowing essential peripherals like keyboards and mice. You can also whitelist specific devices if needed.

#### **Step-by-Step Guide**

**1. Navigate to Device Actions**

Select the computer(s) you wish to secure.

* From the main menu, navigate to Devices > Computers (1).
* Check the box (2) next to the specific computer(s) (e.g., `WIN-OEA8...`) you want to configure.
* Click the Actions button (3) located above the list.

<figure><img src="/files/HlysEpGWQUCu8OPUsWAX" alt=""><figcaption></figcaption></figure>

**2. Select the USB Tool**

* In the dropdown menu that appears, locate the Device actions section.
* Click on USB (2) to open the configuration window.

<figure><img src="/files/LMwp9chYMIKSXJi22Pue" alt=""><figcaption></figcaption></figure>

**3. Configure the USB Policy**

In the "USB Access" window, define whether you are locking or unlocking the ports.

* Deployment Name: specific a name for this policy (e.g., `Block USB Storage - Finance Dept`).
* Targeting: Confirm the correct Target Computers or Target Groups are selected.
* Action Type: Select the desired security level from the dropdown:
  * Block USB Access: Restricts the use of unauthorized USB storage devices.
  * Allow USB Access: Re-enables full access to USB ports.
* Click Submit to apply the policy immediately.

<figure><img src="/files/OE9lAnvTQDHztb9UK43P" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.booldesk.com/how-to-use-modules/configuration-policies/how-to-manage-usb-access-block-allow.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
