Electronic Team uses cookies to personalize your experience on our website. By continuing to use this site, you agree to our cookie policy. Click here to learn more.

Windows USB Device Isolation on Shared Systems

Multi-user environments often lack protection for USB devices. Having the device available to other users can be problematic if it carries private data. This is where isolation comes in handy - and it can be established with the help of USB Network Gate.
Try for Free
14-day Free Trial available
License price starts at $159.95
Available for
Two laptops, one has a webcam connected to it, and the other is displaying the webcam and its settings.

The Problem of USB Access

  • A multi-user system is usually implemented with a single central computer - a terminal server - and multiple clients. Clients can start remote desktop sessions and use the server’s resources - mainly, processing power, RAM, and storage.

    If a USB device is redirected to the terminal server, it may become available to the other connected clients. There are some devices that carry private data, such as:

    • Fingerprint readers
    • USB storage
    • Webcams
    • Microphones

    Other hardware can also pose security risks. For example, input from the keyboard can be recorded to steal passwords. In general, you want other users to have as little access to your devices as possible. This can be accomplished by redirecting devices through USB Network Gate and enabling isolation.
  • The Problem of USB Access

Per-session Device Isolation with USB Network Gate

USB Network Gate is an alternative method of RDP USB redirection over a local network, with two options for isolation - per-session and per-user. Per-session isolation should be the preferred option in most cases, since even if you haven’t shared your log-in credentials with co-workers, a third party can gain unauthorized access to the account.

Here’s how you can redirect a USB device to a remote desktop with per-session isolation:
1
Download USB Network Gate both on the local computer and in the remote session. The two computers must be connected to the same local network.
Download USB Network Gate both on the local computer and in the remote session
2
During the installation process, enable Device Isolation Components.
During the installation process, enable Device Isolation Components
3
On your local computer, the one with connected devices you’re going to share, you’ll need to activate USB Network Gate. A Free Trial is available.
On your local computer, the one with connected devices you’re going to share, you’ll need to activate USB Network Gate
4
You can immediately share a device by opening the “Local USB devices” tab and pressing “Share” next to the device name.
You can immediately share a device by opening the “Local USB devices” tab and pressing “Share” next to the device name.
5
Alternatively, you can click its corresponding gear icon to open device options, which will allow you to add password protection to the device.
Alternatively, you can click its corresponding gear icon to open device options, which will allow you to add password protection to the device
6
In the remote session, open USB Network Gate and switch to “Remote USB devices”. You will see the shared device. Click the arrow next to it and select “Connect for this session”.
In the remote session, open USB Network Gate and switch to “Remote USB devices”
7
Alternatively, click the device name to highlight it and choose “Connect for this session” from the “Connect devices” menu.

The device will now only be accessible in the current session, and if you start a different session under the same user account, it will not be connected. This will allow you to keep devices private even if a single account is shared between multiple users.
Alternatively, click the device name to highlight it and choose “Connect for this session” from the “Connect devices” menu
Note: Starting from version 11.0 USB Network Gate enables webcam and sound isolation in applications that use Microsoft Media Foundation (like Skype, Zoom, Teams, and browsers) during Remote Desktop Protocol (RDP) sessions.

Per-user Isolation with USB Network Gate

Per-user isolation is less secure than per-session isolation, so it should only be chosen in cases where you explicitly want to make the device available to all owners of a given user account. Sharing office peripherals, such as printers, is viable with per-user isolation.

Note: Starting USB Network Gate 11.0 Per-User Isolation feature extends to webcams and sound devices connected to Microsoft accounts, ensuring secure, private access for each user.

In order to enable per-user device isolation, do the following:
1
Download and install USB Network Gate on both the local computer and in the remote session, and then share a device. Device Isolation Components will need to be enabled, and you will have to activate the instance on the local computer. Refer to steps 1 through 5 of “Per-session Device Isolation with USB Network Gate”.
Download USB Network Gate both on the local computer and in the remote session
2
Launch USB Network Gate in the remote session and open the “Remote USB Devices” tab. Your shared device should appear on the list.
Launch USB Network Gate in the remote session and open the “Remote USB Devices” tab
3
Open a context menu by clicking the arrow next to “Connect”, and select “Connect for this user”. Alternatively, highlight the device by clicking its name and use the “Connect devices” option on the menu bar.
Open a context menu by clicking the arrow next to Connect, and select Connect for this user
4
Once the connection is successful, you will be able to see which user account has access to the device.
Once the connection is successful, you will be able to see which user account has access to the device
Note: if you suspect that there is a threat of unauthorized access, you can always press “Unshare” on the local computer to disconnect it for the remote session. Don’t forget to set a password for improved security!

USB Network Gate can share a great variety of USB devices, including audio cards, scanners, flash drives, and even uncommon ones, such as the 3D mice used in digital design. If you’re looking to make your RDP sessions safer, consider switching to USB Network Gate for your redirection needs!

USB Network Gate

Redirect USB devices over network
Try for Free
14-day Free Trial available
License price starts at $159.95
Available for