Control use of the WebUSB API

Allows you to set whether websites are allowed to get access to connected USB devices. Access can be completely blocked, or the user can be asked every time a website wants to get access to connected USB devices.

This policy can be overridden for specific URL patterns using the 'WebUsbAskForUrls' and 'WebUsbBlockedForUrls' policies.

If this policy is left not set, '3' will be used, and the user will be able to change it.

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

Control use of the WebUSB API


  1. Do not allow any site to request access to USB devices via the WebUSB API
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Google\Chrome
    Value NameDefaultWebUsbGuardSetting
    Value TypeREG_DWORD
    Value2
  2. Allow sites to ask the user to grant access to a connected USB device
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Google\Chrome
    Value NameDefaultWebUsbGuardSetting
    Value TypeREG_DWORD
    Value3


chrome.admx

Administrative Templates (Computers)

Administrative Templates (Users)