Control use of the WebUSB API: registry value DefaultWebUsbGuardSetting (Edge)UserHKCU\Software\Policies\Microsoft\Edge
- Policy ID
- DefaultWebUsbGuardSetting
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Edge version 77, Windows 7 or later
- Source
- Microsoft Edge Policy Templates (version 155.0.4283.45)
- Category
- Microsoft Edge › Content settings
Registry
DefaultWebUsbGuardSetting
REG_DWORDUserComputer…\Software\Policies\Microsoft\EdgeHKCU\Software\Policies\Microsoft\Edge Current key
HKLM\Software\Policies\Microsoft\Edge
HKLM\Software\Policies\Microsoft\Edge
- Enabled value
- Depends on the option value
- Element
- Control use of the WebUSB API
| Item | Stored value |
|---|---|
| Do not allow any site to request access to USB devices via the WebUSB API | 2 |
| Allow sites to ask the user to grant access to a connected USB device | 3 |
Apply with .reg · CMD · PowerShell
UserPer-account setting
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Edge] ; Options (use only one) ; Do not allow any site to request access to USB devices via the WebUSB API "DefaultWebUsbGuardSetting"=dword:00000002 ; Allow sites to ask the user to grant access to a connected USB device "DefaultWebUsbGuardSetting"=dword:00000003
CMD
:: Options (use only one) :: Do not allow any site to request access to USB devices via the WebUSB API reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 2 /f :: Allow sites to ask the user to grant access to a connected USB device reg add "HKCU\Software\Policies\Microsoft\Edge" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 3 /f
PowerShell
# Common: create the key New-Item -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Force | Out-Null # Options (use only one) # Do not allow any site to request access to USB devices via the WebUSB API New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null # Allow sites to ask the user to grant access to a connected USB device New-ItemProperty -Path 'HKCU:\Software\Policies\Microsoft\Edge' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null
ComputerMachine-wide setting
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Edge] ; Options (use only one) ; Do not allow any site to request access to USB devices via the WebUSB API "DefaultWebUsbGuardSetting"=dword:00000002 ; Allow sites to ask the user to grant access to a connected USB device "DefaultWebUsbGuardSetting"=dword:00000003
CMD
:: Options (use only one) :: Do not allow any site to request access to USB devices via the WebUSB API reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 2 /f :: Allow sites to ask the user to grant access to a connected USB device reg add "HKLM\Software\Policies\Microsoft\Edge" /v "DefaultWebUsbGuardSetting" /t REG_DWORD /d 3 /f
PowerShell
# Common: create the key New-Item -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Force | Out-Null # Options (use only one) # Do not allow any site to request access to USB devices via the WebUSB API New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 2 -Force | Out-Null # Allow sites to ask the user to grant access to a connected USB device New-ItemProperty -Path 'HKLM:\Software\Policies\Microsoft\Edge' -Name 'DefaultWebUsbGuardSetting' -PropertyType DWord -Value 3 -Force | Out-Null