I have two questions regarding USB storage: * How to set in Policy Manager that USB storage is automatically scanned when connecting? * How to ban all USB storage devices except for specific one in Policy Manager?

nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

USB storage access and scaning

dcajko

I have two questions regarding USB storage:

How to set in Policy Manager that USB storage is automatically scanned when connecting?
How to ban all USB storage devices except for specific one in Policy Manager?

Find more posts tagged with

Accepted answers

LiselotteP

Note — Policy Manager 15.30 is now end of life

This thread was written for Policy Manager 15.30, which reached end of support on 11 May 2026. The USB scanning and device control settings described by Sethu still exist in WithSecure Elements, but the path has changed.

For Elements users:

1. Automatic USB scanning on connect:In Elements Security Center, go to Security Configurations > Profiles > Scanning settings > Common scanning and set Action when USB storage device is plugged in to "Scan USB and show result to user" or "Force scan USB and show result to user."

2. Block all USB storage except a specific device:Use Device Control in the profile editor. Enable Device Control, set removable mass storage to blocked, then add an Allow rule with the specific device's hardware ID. The hardware ID can be found in Elements Security Center under the device's Connected devices tab when the USB is plugged in.

For full guidance see the current KB articles:

Last reviewed: May 2026.

All comments

LiselotteP

Note — Policy Manager 15.30 is now end of life

For Elements users:

For full guidance see the current KB articles:

Last reviewed: May 2026.

Sethu Laks

Hi @dcajko

Thank you for reaching out the WithSecure Community,

Based on the screenshot you provided from Policy Manager 15.x, please upgrade to the latest version of Policy Manager 16.x. This updated version includes a potential fix that should allow you to configure USB storage as per your requirement.

To set up automatic scanning of USB storage when connected in Policy Manager.
To restrict all USB storage devices except for a specific one in Policy Manager.

By upgrading to the latest version of Policy Manager, you should have access to these configuration options for USB storage.

Best regards,
Sethu
Community Moderator | Technical Support Engineer
WithSecure™ https://www.withsecure.com/en/home

dcajko

Hi @Sethu Laks

I have a different view, the console is on version 15.30.96312

2. I can't manage to configure that only one USB works for me. If I disable USB then the one I selected on Allow by ID doesn't work either.

Sethu Laks

Hi @dcajko

Thank you for reaching out the WithSecure Community,

In PM> Select Root> Settings> Windos> Manual Scanning >Action when USB storage device is plugged in - Select "Scan USB and show results to user"

2. You can refer to these following article:

https://community.withsecure.com/en/kb/articles/5517-blocking-device-access-using-predefined-rules

https://community.withsecure.com/en/kb/articles/29342-can-i-limit-or-block-usb-storage-devices-using-device-control-in-withsecure-products

Best regards,
Sethu
Community Moderator | Technical Support Engineer
WithSecure™ https://www.withsecure.com/en/home