3 days ago I talked about how to disable removable storage devices such as USB drives but still allowing your USB scanner, keyboard, and mouse working.
What if you to disable write access and only allowing read access to a removable storage devices such as a USB thumb drive?
Theft of trade secrets and other corporate documentation gets easier and easier everyday. 1GB+ USB sticks can fit in your shirt pocket and that data that it can hold can be devastating to an organization. Front mounted USB ports just make it easier!
Well thanks to Microsoft, it has already addressed this concern and allows you make USB storage devices read only. This tip only works with Service Pack 2 installed in Windows XP Pro. I personally think this was a great move. Here’s how to disable write access to removable storage devices such as USB thumb drive.
Its an easy registry change:
1. Go to Start -> Run -> Type regedit and hit Enter or click on the OK button.
Browse to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
2. Create a new key called StorageDevicePolicies
Right click on the Control, select New -> Key and type in StorageDevicePolicies
3. Create a DWORD called WriteProtect under StorageDevicePolicies that you created in step 2 and set the value to 1.
This will prevent users from writing to USB drives.
To allow writing to USB drives just change the value to 0. Oh, you don’t need to restart your computer in order to disable write access to removable storage using the method above.
P/S: When I tried this tip, i couldn’t get it to work as I am still able to write and copy files into my USB thumb drive. Finally I found out that when I created the Key and DWORD in regedit, I accidentally added a space at the end of the word/value. After I removed the space which is invisible, it worked perfectly :D
Related posts:
gracias por toda vuestra informaicion
un saludo
Here is another WAY TO WRITE PROTECT the USB Flash Drive:
1. Write all necessarry data on your flash drive before making it write protect.
2. Boot any clean pc having windows xp in safe mode with command prompt.
3. Insert your flash drive on any available usb port.
4. Find your usb drive letter. it may be e: or f: or depending on the partitions on your hard drive.
5. Go to your usb drive letter prompt and type dir e.g. e:\dir or f:\dir, just notedown the FREE BYTES. Now back to c:\>
6. Type fsutil file createnew (driveletter)\blank.txt (free bytes you had noted) e.g. fsutil file createnew e:\blank.txt 2506664
7. Wait until its create blank.txt on your usb drive and back to c:\> prompt .
8. Your USB Flash Drive is now completely write protect. You may use the remaing space that you just consumed to make blank.txt, by deleting blank.txt
9. Its recommended to keep your USB Drive virus free including autorun.inf before making it write protect.
There are many ways to make your USB Drive free from autorun.inf
I’ll also mention about those in my next posts.
Thanx
It didn’t work with my pendrive kingston 16 gb. What else can I do, please???
This is a best to protect your data. The advantage of this, you can not copy or paste the data in USB. The good protection of your data regarding USB.
It great thanks for the trick,
i can prevent the programmer in my office cheat the code… they have to do the job just in that PC :)
(do the job that before from other programmers)
Muchas Gracias, no tengo mas palabras.
I’m looking for something similar but for Apple Mac OX 10.6 Snow Leopard, any one have any idea?
?how do you enable write to jumpdrive that has been disabled>?
was a my mistake, the method works, only if you have an already inserted key, it became readonly starting from next insertion
This not work for me without rebooting. I have Xp
professional with servicepack 3. I need do it without reboot
What are the advantages of disabling write access to the USB Drives ?
oye gracias hice todo lo que dijiste pero lo ultimo no me sale unable to create …… eso no me sale por que?
oye hice todos los pasos pero no me funciona sigue igual ayudame
gracias
es facil en el adaptador trai una pestañita solo muevanla d lugar no nesesitan entrar al sistema
Eso lo haog con el USB conectado o desconectado?
Good info. Thank you.
It is fine for disabling copying to the thumb drive from a modified machine. But what about disabling writing to a pen drive in the drive itself; what I mean is this…I have a pen drive which I insert in the USB socket of a friend\’s PC, and the PC immediately sends some malware into the thumb drive. How to stop that from happening? I don\’t want to modify the registry of my friend\’s computer. Please suggest some remedy.
Other way is to use the USB security feature of Desktop Authority. We’ve blocked or limited the use of all security-dangerous devices. We’ve blocked usb write, cd burn, the usage of bluetooth for our developers team. But for some users we’ve granted access to all of these devices. It was not a complicated task becuase of Desktop Authority’s Validation Logic.
scriptlogic.com/products/DesktopAuthority/
nice trick dude, shall take note of it :), this post has made into my del.icio.us
Great info. Thanks for sharing.