Group Policy SearchGroup Policy Search
English

Control use of the WebUSB API: registry value DefaultWebUsbGuardSetting (Chrome)UserHKCU\Software\Policies\Google\Chrome

Policy ID
DefaultWebUsbGuardSetting
Scope
Computer Configuration, User Configuration
Supported on
Microsoft Windows 7 or later
Source
Google Chrome Policy Templates (version 156.0.8078.80)
Category
Google › Google Chrome › Content settings

Registry

DefaultWebUsbGuardSetting

REG_DWORDUserComputer
…\Software\Policies\Google\ChromeHKCU\Software\Policies\Google\Chrome Current key
HKLM\Software\Policies\Google\Chrome
Enabled value
Depends on the option value
Element
Control use of the WebUSB API
Options
ItemStored value
Do not allow any site to request access to USB devices via the WebUSB API2
Allow sites to ask the user to grant access to a connected USB device3
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Google\Chrome]

; Options (use only one)
; Do not allow any site to request access to USB devices via the WebUSB API
"DefaultWebUsbGuardSetting"=dword:00000002
; Allow sites to ask the user to grant access to a connected USB device
"DefaultWebUsbGuardSetting"=dword:00000003
CMD
:: Options (use only one)

:: Do not allow any site to request access to USB devices via the WebUSB API
reg add "HKCU\Software\Policies\Google\Chrome" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant access to a connected USB device
reg add "HKCU\Software\Policies\Google\Chrome" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 3 /f
PowerShell
# Common: create the key
New-Item -Path 'HKCU:\Software\Policies\Google\Chrome' -Force | Out-Null

# Options (use only one)
# Do not allow any site to request access to USB devices via the WebUSB API
New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant access to a connected USB device
New-ItemProperty -Path 'HKCU:\Software\Policies\Google\Chrome' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome]

; Options (use only one)
; Do not allow any site to request access to USB devices via the WebUSB API
"DefaultWebUsbGuardSetting"=dword:00000002
; Allow sites to ask the user to grant access to a connected USB device
"DefaultWebUsbGuardSetting"=dword:00000003
CMD
:: Options (use only one)

:: Do not allow any site to request access to USB devices via the WebUSB API
reg add "HKLM\Software\Policies\Google\Chrome" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 2 /f
:: Allow sites to ask the user to grant access to a connected USB device
reg add "HKLM\Software\Policies\Google\Chrome" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 3 /f
PowerShell
# Common: create the key
New-Item -Path 'HKLM:\Software\Policies\Google\Chrome' -Force | Out-Null

# Options (use only one)
# Do not allow any site to request access to USB devices via the WebUSB API
New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null
# Allow sites to ask the user to grant access to a connected USB device
New-ItemProperty -Path 'HKLM:\Software\Policies\Google\Chrome' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null