When should I disable USB data entirely on managed tablets?
Disable USB data when a tablet should charge and nothing else. It is an optional Skie protection for devices on Android 14 and newer, using Android's USB data signalling control, and it is off by default. With it on, the port carries power only, so a cable cannot be used to move data or connect a computer.
USB file transfer is already blocked by default, and debugging is blocked too. So why a third switch? Because the data lines in the port can also be used for other connections, such as a keyboard, a storage stick or a debugging cable. Disabling data signalling closes the whole class of USB data connections at the hardware level, where the device supports it.
Skie applies the control as the device owner on Android 14 and newer. On older versions the switch has no effect, and the other USB protections remain. The port still charges the tablet as normal, so classroom charging carts continue to work.
It is optional because some devices need USB data. A lab might use a wired keyboard, a mouse, a USB audio device or a projector accessory. Admins also need USB at times for laptop provisioning, so plan that before the switch goes on, and remember that provisioning happens before the device is managed.
The dashboard shows it in the hardening section as one toggle, with its state read back from Android and counted in the compliance score.
Practical tip: turn it on for charging-cart tablets that students never plug into anything. For a group with accessories, leave it off and rely on the default USB file transfer block.