Can anyone recommend a desktop document scanner that works without appearing to Windows as an external drive? Our organization now requires VP-level approval for USB exceptions, which makes deploying a scanner unnecessarily difficult. Some portable scanners mount a small drive containing their drivers or scanning utility, and our security policy blocks the device even when the software is copied locally. A reliable scanner that avoids this behavior—or a compatible scanning workflow—would be ideal.
5 Answers
For occasional scanning, the OneDrive mobile app or another built-in phone scanning feature can work surprisingly well. The downside is that automatic page sizing and PDF output can be inconsistent, so it may not be suitable when scans need to line up with standard Letter-size pages or existing PDFs.
We use Fujitsu fi-series scanners, including the fi-7160. They support fast duplex scanning and can handle IDs and other documents reliably. They’ve also held up well in environments with strict requirements around PII, PCI, HIPAA, and government records, so they’re a reasonable choice when security review is a concern.
The Canon imageFORMULA DR-C225 II is worth looking at. It doesn’t provide onboard storage for documents and is used strictly as a scanner, so it avoids the “drive containing the installer” behavior found on some portable models. Fujitsu desktop scanners are another solid option; the ScanSnap line is popular, while the fi-7160 is a better fit for higher-volume or more controlled environments.
Before replacing the hardware, check whether the scanner works with a neutral application such as NAPS2. It may let you install the scanning software on the workstation while using a compatible TWAIN or WIA driver, avoiding dependence on a utility stored on the scanner. Confirm the scanner’s driver behavior with your endpoint-security team first.
The cleanest solution is usually a network scanner rather than a USB peripheral. An Ethernet-connected scanner does not enumerate as USB mass storage on the workstation, so it may follow a separate network-device approval process. That said, this only helps if your organization is willing to enforce or approve that deployment model.

Some Canon portable models do mount a small virtual drive containing their driver, but that storage isn’t required for the scanning function itself. The exact model and security configuration matter.