USB Protection

USB storage control - mass-storage off / read-only / block, MTP/PTP phone blocking, and a password-controlled unlock per drive insertion, plus per-class policy where the device class and Windows build support it.

6 features

USB Drives Read-Only

Lets USB flash drives and external disks mount but blocks all writes to them.

Disable USB Drives

Blocks USB mass-storage devices (flash drives, external HDDs, SSDs) so they can no longer mount. USB keyboards, mice, headsets and printers continue to work normally.

Disable USB Phones (MTP/PTP)

Prevents Android phones, iPhones and digital cameras from connecting over USB as media devices, so their storage cannot be browsed.

USB Device-Class Allow / Deny

Per-class USB policy for the device classes CtrlOne supports. Applicability and the verified outcome depend on the device class, driver and Windows build; it is not a blanket allow/deny for every class and does not whitelist arbitrary trusted devices through a global driver switch. Survives reboot.

USB Storage Lockdown (Off / Read-only / Block)

Three-mode mass-storage control. Read-only blocks writes immediately on already-mounted volumes; Block stops new sticks from mounting at all. Keyboards, mice and phone-charging are unaffected.

Disable USB Drives (password protected)

Blocks USB flash drives, but each time a drive is inserted the person is asked for the dedicated USB password you set. An authenticated entry unlocks USB storage only until that drive is removed, and the next insertion asks again. It replaces the plain 'Disable USB Drives' lock and does not create standing exceptions for arbitrary trusted devices.