USB storage blocking - Primo Documentation

Platform compatibility

macOS	Windows	Linux	iOS / iPadOS	Android
✅	✅	✅

Set up the control

Set the access mode (Windows only)

On Windows, choose the USB storage access mode from the dropdown:

Block — prevents all removable storage devices from connecting.

Select targeting

Choose which devices to apply the control to: all devices, specific device groups, or a custom target.

Modify or remove the control

Disable the control from the profile settings. Disabling stops enforcement but does not remove existing configurations from devices.

How it works

macOS
Windows
Linux

Primo pushes an MDM restriction that blocks removable storage devices from mounting. No additional configuration is required.

Primo applies a configuration that blocks UI-based mounting of removable storage devices — for example, prompts from the desktop file manager when a USB drive is connected. The policy is applied system-wide and applies regardless of which user is logged in.The control does not block manual mounting from the command line. Users with sufficient privileges can still mount USB storage using mount.

Troubleshooting

A user mounted a USB drive from the terminal after applying the control

This is expected behavior on Linux. USB storage blocking only blocks UI-based mounting. Command-line mounting with mount is not restricted by this control.

Remote access

WiFi

​Platform compatibility

​Set up the control

​Modify or remove the control

​How it works

​Troubleshooting

Platform compatibility

Set up the control

Modify or remove the control

How it works

Troubleshooting