ThreatLocker Storage Control — Data Protection for USB and R

What is Storage Control?

Storage Control is a policy-driven access control solution for storage devices, whether local folders, network directories, or external media (such as USB drives).

The ThreatLocker® Storage Control solution allows you to create flexible policies ranging from basic USB usage restrictions to complex scenarios — for example, blocking access to backup storage except when accessed by your backup application.

How Does ThreatLocker® Storage Control Work?

When a storage device is blocked, the user sees a popup allowing them to submit an access request.
An administrator can promptly grant permission in as little as 60 seconds.

Comprehensive File Access Auditing

Gain detailed file access history on USB drives, local disks, and network shares. All activity is centrally logged within minutes of file access.

Flexible Storage Access Policies

Grant or deny access to storage devices based on user, time, application type, and more — fully customizable to your business processes.

Simple Access Request

Users see a pop-up prompt to request storage access permission from the administrator without unnecessary processes.

USB Device Blocking by Policy

Control USB access by serial number, manufacturer, or file type.Minimize data leakage risks from physical media.

Does "USB Blocking" Restrict All Peripheral Devices or Only Storage Drives?
This feature blocks only devices that Windows recognizes as USB storage drives.
Can Users Be Restricted from Uploading Certain Files or Applications to Web Resources?
Storage Control does not block access to specific domains but effectively prevents data leakage through known file-sharing services.
At the same time, it ensures that confidential data is accessible only to authorized applications that do not have file-sharing capabilities.
What Are the Typical Settings for Storage Control?
By default, Storage Control monitors data in local folders, DVD/CD drives, USB devices, UNC paths, and external drives on all protected endpoints.
Some policies apply Ringfencing to block unauthorized applications from accessing specified files.
Can Access Be Restricted Only to USB Storage Devices Without Blocking Keyboards or Mice?
Yes. Storage Control manages file operations on USB devices (read, write, move, delete) without affecting USB port power or other peripherals.
Can Storage Control Replace a DLP System?
Currently, no. However, the solution provides some functionality similar to DLP.
It is recommended to consult with a solutions engineer or schedule a demo to assess suitability for your company’s needs.
Are Storage Control Policies as Flexible as Those in Application Control?
Yes. Policies can be configured by user/group, device serial number, applications, and even include an expiration date for the policy.

Fill out the form to receive a personalized consultation on testing within your IT infrastructure:

This feature blocks only devices that Windows recognizes as USB storage drives.

Storage Control does not block access to specific domains but effectively prevents data leakage through known file-sharing services.At the same time, it ensures that confidential data is accessible only to authorized applications that do not have file-sharing capabilities.

By default, Storage Control monitors data in local folders, DVD/CD drives, USB devices, UNC paths, and external drives on all protected endpoints.Some policies apply Ringfencing to block unauthorized applications from accessing specified files.

Yes. Storage Control manages file operations on USB devices (read, write, move, delete) without affecting USB port power or other peripherals.

Currently, no. However, the solution provides some functionality similar to DLP.It is recommended to consult with a solutions engineer or schedule a demo to assess suitability for your company’s needs.

Yes. Policies can be configured by user/group, device serial number, applications, and even include an expiration date for the policy.

Storage Control does not block access to specific domains but effectively prevents data leakage through known file-sharing services.
At the same time, it ensures that confidential data is accessible only to authorized applications that do not have file-sharing capabilities.

By default, Storage Control monitors data in local folders, DVD/CD drives, USB devices, UNC paths, and external drives on all protected endpoints.
Some policies apply Ringfencing to block unauthorized applications from accessing specified files.

Currently, no. However, the solution provides some functionality similar to DLP.
It is recommended to consult with a solutions engineer or schedule a demo to assess suitability for your company’s needs.