ChromeOS USB Whitelist

[NetworkSeb]

Hello, I have tried to search for an answer to this but not had any luck so am hoping someone on here can help...

We have just implemented the blocking of USB Storage Devices on our School Computers. As was expected there are exceptional circumstances that require the use of a USB Device to be allowed (Microbits being just one).

So we have gone with a Whitelist approach using USBDLM on the Windows PCs. All working no problems.

Unfortunately, we are not having much luck applying the same rules to the Chromebooks/boxes. In the Google Admin Console, we can see that in the user based settings we are able to 1 - allow USBs, 2 - allow USBs but read-only and 3 - block USBs altogether. Not exactly what we are after.In the Device settings there is a setting that is called USB Detachable Whitelist. This sounds like it should do what we need but unfortunately it doesn't appear to be the case. Regardless of what Vendor and PID details we enter the devices we do NOT want to be accessible are still showing up in the File app!

So I guess the question is, has anyone been able to block USB devices but Whitelist a particular device(s) in ChromeOS?

Hopefully someone has understood the problem I am facing and might have a solution or at the very least it would be nice to know that it's not just us with this issue.

Thanks in advance.

[bald_pig]

Did you add the values correctly?

 

https://support.google.com/chrome/a/answer/1375678?hl=en#usbwhitelist

[NetworkSeb]

Well I input the following into the Device Settings>USB Detachable Whitelist

 

0d28:0204

0951:1603

 

but I noticed that the preceding zeros are removed after saving so we end up with:

 

d28:204

951:1603

 

Could that be the issue? If so, how does one resolve?

 

Thanks

[Tech13]

I appreciate this is an old thread but I would be interested in the outcome of this, we have the same situation.

 

We have blocked USB devices for Chromebooks completely via gSuite and have also tried to whitelist as per the above method with no success.

 

If anyone has any Gems of knowledge that would be most appreciated, it's the oldest ticket on our helpdesk!!!

[SYTech]

*bump*

[sly_fox]

*bump again*

[sly_fox]

I haven't been able to find any solutions for this elsewhere, hoping someone stops by with an idea