Set a shared-PC USB policy without breaking approved work
Start with the data, devices, and people involved. A clear boundary makes the security setting easier to test and maintain.
Step-by-step workflow
List required shared-PC devices
Record approved USB drives, keyboards, mice, phones, docks, and other peripherals before enabling restrictions.
Choose the narrowest useful rule
Decide whether the shared PC needs storage blocking, phone-transfer control, write protection, or an approved-device list.
Add trusted company drives
Open GiliSoft USB Lock, add approved devices to the relevant whitelist, and keep an owner and business purpose for each exception.
Block unknown drives and test both paths
Enable the storage rule, reconnect an approved drive, then test an unlisted drive and the peripherals that must continue working.
Protect and review the setup
Set an administrator password, record the tested configuration, and remove temporary approvals when the shared task ends.
Make the policy easier to manage
Keep recovery separate
Store passwords, recovery keys, and backup information away from the protected device or image.
Test before rollout
Use a non-critical device and verify both the permitted path and the blocked path before applying the rule broadly.
Review exceptions
Give temporary approvals an owner and review date so old exceptions do not become permanent access.
Common problems to check
- Confirm the Windows edition and administrator permissions required by the selected control.
- Test the exact USB device, file system, or target PC instead of relying on a similar model.
- Keep an independent backup before encrypting, blocking, formatting, or creating an image.
- Do not store passwords or recovery keys beside the protected media.
Frequently Asked Questions
Can I block USB drives without disabling the keyboard and mouse?
Yes. Apply storage-specific rules instead of disabling the entire USB controller, then test every required peripheral.
Can approved USB drives still work on a shared PC?
Yes. GiliSoft USB Lock can keep trusted company drives on an approved list while unknown removable storage remains restricted.
Can standard users change the USB restrictions?
Protect the USB Lock settings with an administrator password so ordinary shared-PC users cannot casually change the policy.
Can I block phone file transfer too?
Yes. Include phone and USB tethering controls when the shared-PC policy must cover more than storage drives.
Is blocking USB drives the same as encrypting them?
No. USB control decides which devices can be used on the computer; encryption protects data stored on the removable drive.