Scout Enterprise Management Suite

Defining rules for using USB devices

February 25, 2025

Contributed by:

C M

USB rules allow you to restrict the use of USB mass storage devices to certain models, for example.

For the relevant OU or device, open Device configuration > Hardware > USB > Edit.
In the list-field, select a set of predefined rules as template.
Double-click into the relevant line, or select a line and press F2.
Modify the rule by using the example rules below.

The values of the manufacturer ID (VID) and product ID (PID) can be found on the device in the Config panel under (Peripherals > USB > Information):
Confirm with OK.

Example rules

Rule	Code
Allow a specific USB mass storage device model only	`[ALLOW: VID=0781 PID=5151] # Allow a particular USB model (Example: SanDisk Cruzer Micro)`
Deny all devices of the class MASS STORAGE DEVICES	`[DENY: CLASS=08]`
Deny a specific smart card model only	`[DENY: VID=18a5 PID=0302] # Deny a particular smart card model (Example: Omnikey CardMan 3821)`
Allow all devices of the class SMARTCARD	`[ALLOW: CLASS=0B]`
Deny all printers, mass storage devices, smart card readers	`[DENY: CLASS=07] # Deny all devices of the class [PRINTERS], [DENY: CLASS=08] # Deny all devices of the class [MASS STORAGE DEVICES], [DENY: CLASS=0B] # Deny all devices of the class [SMARTCARD]`
Disable the microphone of a webcam	`[DENY: VID=045e PID=0810 CLASS=01] # Deny audio for the specified USB device`

The syntax of USB rules corresponds to the syntax of Citrix USB policy rules.

Important:

The USB rules affect all USB device classes including 03 HID (Human Interface Devices). If you deny the 03 HID class, the mouse and keyboard will be deactivated. For specific hardware configurations, you might encounter issues during the boot process of the device. We strongly recommend performing tests before using this option.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Defining rules for using USB devices

February 25, 2025

Contributed by:

C M

Defining rules for using USB devices

Example rules

In this article