Policy
Control use of the WebUSB API
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices. You can override this policy for specific URL patterns by using the 'WebUsbAskForUrls' (Allow WebUSB on specific sites) and 'WebUsbBlockedForUrls' (Block WebUSB on specific sites) policies. If you don't configure this policy, sites can ask users whether they can access the connected USB devices ('AskWebUsb') by default, and users can change this setting. Policy options mapping: * BlockWebUsb (2) = Do not allow any site to request access to USB devices via the WebUSB API * AskWebUsb (3) = Allow sites to ask the user to grant access to a connected USB device Use the preceding information when configuring this policy.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
Control use of the WebUSB API ID DefaultWebUsbGuardSetting | enum | Path Software\Policies\Microsoft\Edge Value name DefaultWebUsbGuardSetting Type REG_DWORD | Options: Do not allow any site to request access to USB devices via the WebUSB API (2), Allow sites to ask the user to grant access to a connected USB device (3) |