Block USB Drives and SD Cards
Restrict flash drives, external disks and SD cards on Windows PCs. Block unwanted storage access, with an additional option for non-system drives when your policy requires it.
GiliSoft USB Lock is USB device control software for Windows that helps keep confidential files from leaving your PC through unapproved storage and connected devices. Block USB drives completely or manage reading and writing separately, so approved work can continue while unwanted transfers are restricted.
Control flash drives, external disks, SD cards, CD/DVD media, Android and iPhone data transfers, and USB tethering. Keep trusted company storage available through a device whitelist, and manage approved USB Wi-Fi and Ethernet adapters with a separate network-adapter whitelist.
Export and import trusted storage-device lists across PCs, review allowed and denied access events, and protect administrative settings with a password. Website and program restrictions provide additional controls for shared computers and managed workstations.
Built for businesses protecting client records, finance and HR teams handling confidential documents, schools managing classroom computers, and IT staff maintaining shared office PCs. See the USB Lock user guide for read and write rules, approved devices and activity review.

Restrict flash drives, external disks and SD cards on Windows PCs. Block unwanted storage access, with an additional option for non-system drives when your policy requires it.
Add company drives to a trusted-device whitelist so approved media stays usable while personal and unknown devices remain blocked.
Use separate read and write settings for USB storage. Allow reading while blocking new files from being copied to USB, or restrict reading when the device's contents should not be opened.
Export a trusted-device list and import it on additional computers instead of registering the same approved drives separately on every endpoint.
Control Android and iPhone data connections and block USB hotspot use so phones do not create an unmanaged transfer or internet channel.
Restrict CD/DVD/Blu-ray media, card readers, printers, Bluetooth, modems, and selected peripheral ports where company policy requires it.
Review blocked attempts, approved-device activity, and policy events to see when removable-media access was allowed or denied.
Use password protection, recovery email, invisible mode, and failed-password handling to reduce unauthorized policy changes.
Restrict USB Wi-Fi and USB Ethernet adapters from creating an unapproved network connection on a managed Windows PC.
Register reviewed USB network hardware by device identity so approved adapters remain available while unlisted devices are blocked.
Restrict selected websites and programs on shared or managed Windows PCs. Keep device-access rules and additional workstation controls in the same application.
USB Lock helped us enforce removable-media policy on shared office computers without interrupting approved workflows.
Block USB/SD Drives gave us cleaner control over copy-out risks, especially on front-desk and support machines.
CD and media lock controls made policy enforcement clearer for both administrators and non-technical staff.
Trusted device whitelist rules let approved company USB drives work normally while blocking unknown devices.
Control USB storage, optical drives, card readers, and other removable-device channels from one policy screen.
Protect business records, customer information and shared workstations with clear rules for removable devices and USB data transfers.
Reduce unauthorized data transfer from office PCs by blocking unknown USB storage devices while keeping approved company media available for normal work.
Keep approved company USB drives working while blocking personal or unknown removable devices through whitelist rules, exportable lists, and repeatable endpoint policy.
Control removable media, CD/DVD access, mobile-device connections, and other local device channels on shared desktops and laptops used by several people.
Keep public or semi-managed computers usable while preventing students, guests, or temporary users from copying data through removable devices or phone connections.
Protect high-exposure workstations where sensitive files, customer records, or internal documents should not leave through personal storage devices, card readers, or phones.
Set local device policies, reuse approved-device lists and review access events from one application. Keep everyday USB rules clear for staff and support teams.
Set the access rules your Windows PCs need: block unapproved devices, preserve access for trusted hardware and review activity from the same application.
Keep personal and unregistered drives unavailable while approved company devices continue to work through the trusted-device list.
Apply policy to USB storage, phones, optical media, card readers, Bluetooth, printers, and selected peripheral channels from the same product.
Export and import whitelist entries so additional PCs can recognize approved drives without repeating the complete setup manually.
Use access records to review denied devices, allowed events, and policy activity during support checks or internal incident follow-up.
USB Lock helps when removable-device access should be managed by policy instead of left open to every flash drive, phone, external disk, or media device.
Stop unknown flash drives and external disks from becoming an uncontrolled path for copying files out of business computers, shared desktops, or front-desk PCs.
Keep trusted company drives available while blocking access to unapproved removable storage. For multi-PC setup, see USB Lock whitelisting instructions.
Close USB-based mobile data channels and phone hotspot workflows that bypass normal network and endpoint policy on controlled office, lab, or shared computers.
Keep permitted files on a USB drive readable while preventing users from writing new files to it. See how to block files from being copied to USB.
Restrict access to optical media, card readers, and selected peripheral channels where removable data movement is a concern but the computer still needs daily use. See how to block CD/DVD writing while keeping disc reading.
Use deny and allow logs to understand when device access was attempted, blocked, or approved during normal operation, policy review, or support follow-up.
Helpful related guides: allow only approved USB devices, USB Lock whitelisting instructions, prevent USB data leakage, and block phone and USB transfer.
GiliSoft provides volume and Team/OEM licensing, plus custom development for organization-specific device policies and deployment requirements.
The enterprise custom edition supports device-specific temporary passwords: users request a temporary password from the administrator for the device that needs access. This capability is scoped separately from the standard trial.
Contact sales@gilisoft.com with your PC count and policy requirements, or explore temporary USB device access for enterprise deployments.
Yes. Block unauthorized USB storage devices and use the trusted-device whitelist to keep approved company drives available on Windows PCs.
Yes. Add approved USB drives to the storage whitelist. USB network adapters use a separate USB Ethernet whitelist, so you can manage permitted storage and network hardware independently.
Yes. Build the trusted storage-device list on one PC, export it and import it on other Windows computers. Save the rules and verify the approved drives on each PC.
Yes. Enable Disable Writing to USB Disk while leaving USB reading permitted. This creates read-only access for the affected USB storage so users can read files without writing new files to it.
Yes. Android and iPhone data transfers can be restricted, and USB tethering has its own control. These are data-access restrictions, not a switch for cutting power to the USB port.
Yes. Use USB Ethernet Lock to block unapproved USB Wi-Fi and Ethernet adapters. Add permitted adapters to its separate whitelist by device identity before applying the block policy.
Device-specific temporary passwords are available in the enterprise custom edition. A user requests a temporary password from the administrator for the device that needs access. This is a separately scoped customization, not a standard-trial feature.
No. USB Lock controls device access and data transfer on the Windows PC. It does not create an encrypted private area on the USB drive. Its purpose is to block unapproved devices and enforce access rules.