Control use of the WebUSB API

Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices.

You can override this policy for specific URL patterns by using the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) and 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policies.

If you don't configure this policy, sites can ask users whether they can access the connected USB devices ('AskWebUsb') by default, and users can change this setting.

Policy options mapping:

* BlockWebUsb (2) = Do not allow any site to request access to USB devices via the WebUSB API

* AskWebUsb (3) = Allow sites to ask the user to grant access to a connected USB device

Use the preceding information when configuring this policy.

Supported on: Microsoft Edge version 77, Windows 7 or later

Control use of the WebUSB API


  1. Do not allow any site to request access to USB devices via the WebUSB API
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Edge
    Value NameDefaultWebUsbGuardSetting
    Value TypeREG_DWORD
    Value2
  2. Allow sites to ask the user to grant access to a connected USB device
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Microsoft\Edge
    Value NameDefaultWebUsbGuardSetting
    Value TypeREG_DWORD
    Value3


msedge.admx

Administrative Templates (Computers)

Administrative Templates (Users)