USB Filter (Industry 8.1)
7/8/2014
You can use USB Filter to block all USB ports on your device. You can add exceptions to permit certain USB ports or specific USB devices to function normally by adding entries to the permission entry list.
Note
You can only use ELM to configure USB Filter on a device running Windows Embedded 8.1 Industry (Industry 8.1).
You can use Embedded Lockdown Manager (ELM) to add permission entries for all currently connected USB devices and enable USB Filter. When USB Filter is enabled, you can also enable or disable selected USB ports for all devices.
For more specific control over USB Filter permission entries, you must use the Windows Management Instrumentation (WMI) providers for USB Filter.
For more information, see USB Filter (Industry 8.1) on MSDN.
Important
Many devices contain internal USB ports and hubs that connect to common communication devices such as a keyboard, a touch screen, and a wireless network adapter. If you enable USB Filter and do not add permission entries for these devices, your device may become unusable after you restart the device. Clicking Allow only connected devices in ELM automatically adds permission entries for all connected USB devices, including internal USB hubs and devices.
ELM displays the following three columns in the center pane that show you the basic information of the current configuration defined for USB Filter:
- Port The USB port ID. To the left of the USB port id is an icon that indicates the current configuration state of the port:
.png "Allow")
Indicates that the port is allowed, either for the currently connected USB device, or for any USB device..png "Block")
Indicates that the port is blocked, and no USB devices can connect to the port..png "Warning")
Indicates that the port is allowed for a specific USB device, but that the USB device is not currently connected.
- Device Indicates the device class of the USB device currently connected to the port.
- Device Status Indicates if the port is blocked or allowed when USB Filter is enabled.
Common tasks
To allow only currently connected USB devices
Connect any USB devices you want to allow.
In ELM, on the Actions pane, click Refresh.
Click Allow only connected devices. This action also enables USB Filter, and is the only way to enable USB Filter by using ELM.
To allow all USB devices for a port
Make sure USB Filter is enabled. You may need to first allow only connected devices.
On the main pane, select one or more ports.
On the Actions pane, click Allow all USB devices on this port or Allow selected ports.
-or-
On the main pane, right-click on a row and select Allow ports from the drop-down menu.
Actions
In the Action pane of the ELM window, you can use the following commands:
Export to PowerShell
Creates a Windows PowerShell script that you can use to apply the current USB Filter configuration to any device running Industry 8.1.Note
The generated PowerShell script for USB Filter contains comments that provide guidance to help you modify the script for more specific control over USB Filter.
Allow only connected devices
Performs the following actions, in order:- Removes all existing permission entries.
- Adds permission entries for each specific connected USB device on the port that the device is connected.
- Enables USB Filter.
- Disable USB Filter/USB Filter disabled
Disables USB Filter.
- Refresh
Updates the list of USB ports and connected USB devices.
- Allow all USB devices on this port
Allows any USB device to connect to the port. You must enable USB Filter before you can select this action.
- Allow selected ports
Allows any USB device to connect to any of the selected ports. You must enable USB Filter before you can select this action.
- Block all USB devices on this port
Prevents any USB device from connecting to the port. You must enable USB Filter before you can select this action.
- Block selected ports
Prevents any USB device from connecting to any of the selected ports. You must enable USB Filter before you can select this action.