Use an approved-only USB network adapter policy
Start with the data, devices, and people involved. A clear boundary makes the security setting easier to test and maintain.
Step-by-step workflow
List required network hardware
Record adapters used for docks, travel, support, recovery, and ordinary work.
Open USB Ethernet Lock
Connect one approved adapter and confirm its displayed name and USB Ethernet ID.
Add each approved adapter
Use Add in the USB Ethernet Whitelist and verify that the selected device appears in the table.
Enable USB Ethernet blocking
Apply Disable USB Ethernet only after the approved list has been checked and saved.
Test allowed and unknown adapters
Reconnect a listed adapter, then test a different unlisted adapter and confirm the intended result.
Make the policy easier to manage
Keep recovery separate
Store passwords, recovery keys, and backup information away from the protected device or image.
Test before rollout
Use a non-critical device and verify both the permitted path and the blocked path before applying the rule broadly.
Review exceptions
Give temporary approvals an owner and review date so old exceptions do not become permanent access.
Common problems to check
- Confirm the Windows edition and administrator permissions required by the selected control.
- Test the exact USB device, file system, or target PC instead of relying on a similar model.
- Keep an independent backup before encrypting, blocking, formatting, or creating an image.
- Do not store passwords or recovery keys beside the protected media.
Frequently Asked Questions
Can I allow only approved USB network adapters?
Yes. Register approved physical devices and block USB Ethernet adapters that are not on the dedicated whitelist.
Does this affect built-in Wi-Fi?
The policy targets USB network adapters. Test the actual PC to confirm built-in networking remains available as intended.
Can a temporary adapter be approved?
Yes. Add it for a documented period and remove it when the support or travel task ends.
Is this the same list as USB storage devices?
No. USB network adapters and USB storage should be reviewed as separate device categories.