Allow Known USB Network Hardware, Not Every Adapter
A useful whitelist is based on reviewed physical devices, not a broad promise that every USB Wi-Fi or Ethernet adapter is safe. Record who owns each adapter, why it is required, and which Windows PCs may use it.
Decide Which USB Network Adapters to Approve
| Your goal | Recommended control | What remains available |
|---|---|---|
| Company-issued USB Ethernet adapter | Approve after confirming its device identity and assigned user | The registered adapter remains available. |
| Temporary service adapter | Approve only for the required support period, then remove it | The exception does not remain indefinitely. |
| Personal or unknown USB Wi-Fi dongle | Do not add it to the whitelist | The default USB Ethernet restriction remains active. |
| Built-in Wi-Fi or Ethernet | Confirm separately during testing | It is not added as a USB Ethernet whitelist exception. |
- List the USB Wi-Fi and Ethernet adapters that have an approved business use.
- Install and open GiliSoft USB Lock, then select USB Ethernet Lock.
- Connect one approved adapter at a time so its displayed name can be matched to the physical device.
- Do not enable Disable USB Ethernet until every required adapter has been registered.
Add an Approved Adapter by Device Identity
GiliSoft USB Lock keeps network adapters in a separate USB Ethernet whitelist. This prevents a trusted storage device from being mistaken for an approved network connection.
- Connect the approved USB Wi-Fi or USB Ethernet adapter.
- Click Add under USB Ethernet Whitelist.
- Select the connected adapter and click OK.
- Confirm its name and USB Ethernet ID appear in the table, then label the physical adapter for the assigned user or PC.
- Review every row in the USB Ethernet whitelist and remove entries that were added only for testing.
- Select Disable USB Ethernet and save the policy.
- Reconnect a whitelisted adapter and confirm the expected network connection works.
- Connect a separate unlisted adapter and confirm it cannot provide another network connection.
Keep an external record of the adapter owner, department, approval reason, physical label, and USB Ethernet ID. When hardware is lost, reassigned, or replaced, remove the old entry and register the replacement as a new device.
Scheduled review
Compare the whitelist against the current hardware inventory and remove entries with no active owner or purpose.
Replacement hardware
Do not assume a replacement of the same model has the same identity. Connect and approve the new physical adapter separately.
Minimum record
Keep the adapter name, USB Ethernet ID, physical asset label, assigned user or PC, and approval date.
Change control
Document additions and removals so another administrator can explain why each exception exists.
Compare USB Network Adapter Approval Methods
| Method | Default block | Approved-device exceptions | Administration |
|---|---|---|---|
| GiliSoft USB Lock | Yes, for USB network adapters | Dedicated USB Ethernet whitelist | Visible policy and device list |
| Disable-NetAdapter | Only adapters selected by command | Requires separate scripts | PowerShell names and scripting |
| Device Manager | Manual per-device action | No whitelist | Local administrator work |
| PnPUtil | By instance or hardware ID | Requires separate inventory logic | Command-line device management |
Test the Whitelist Before Deployment
Approved adapter
Reconnect every listed device and confirm it receives only the network access intended for that PC.
Unknown adapter
Connect a separate unlisted USB Wi-Fi or Ethernet adapter and confirm the default restriction applies.
Required connections
Confirm built-in networking, docks, and unrelated USB peripherals still behave as intended.
USB Network Adapter Whitelist FAQ
What is a USB network adapter whitelist?
It is a list of approved USB Wi-Fi and Ethernet adapters that remain available while unlisted USB network devices are restricted.
How does USB Lock identify an adapter?
The interface records the selected USB Ethernet name and ID shown for the connected physical device.
Should I add devices before enabling the block?
Yes. Register and verify required adapters first to avoid interrupting approved network access.
Is this the same as the USB storage whitelist?
No. USB network adapters are managed through the separate USB Ethernet whitelist.
Windows Network Adapter References
The Windows command behavior in this article was checked against Microsoft documentation. Microsoft notes that Disable-NetAdapter interrupts connectivity for the selected adapter, and PnPUtil device actions require administrators to identify the intended device carefully.
