> For the complete documentation index, see [llms.txt](https://docs.booldesk.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.booldesk.com/how-to-use-modules/configuration-policies/how-to-manage-usb-access-block-allow.md).

# How to Manage USB Access (Block/Allow)

Overview

The USB Access feature gives you control over the physical USB ports on your managed devices. You can create policies to essentially "lock down" computers by blocking all USB storage devices (flash drives, external hard drives) while still allowing essential peripherals like keyboards and mice. You can also whitelist specific devices if needed.

#### **Step-by-Step Guide**

**1. Navigate to Device Actions**

Select the computer(s) you wish to secure.

* From the main menu, navigate to Devices > Computers (1).
* Check the box (2) next to the specific computer(s) (e.g., `WIN-OEA8...`) you want to configure.
* Click the Actions button (3) located above the list.

<figure><img src="/files/HlysEpGWQUCu8OPUsWAX" alt=""><figcaption></figcaption></figure>

**2. Select the USB Tool**

* In the dropdown menu that appears, locate the Device actions section.
* Click on USB (2) to open the configuration window.

<figure><img src="/files/LMwp9chYMIKSXJi22Pue" alt=""><figcaption></figcaption></figure>

**3. Configure the USB Policy**

In the "USB Access" window, define whether you are locking or unlocking the ports.

* Deployment Name: specific a name for this policy (e.g., `Block USB Storage - Finance Dept`).
* Targeting: Confirm the correct Target Computers or Target Groups are selected.
* Action Type: Select the desired security level from the dropdown:
  * Block USB Access: Restricts the use of unauthorized USB storage devices.
  * Allow USB Access: Re-enables full access to USB ports.
* Click Submit to apply the policy immediately.

<figure><img src="/files/OE9lAnvTQDHztb9UK43P" alt=""><figcaption></figcaption></figure>