Home > Computer > Disable Write Access to Removable Storage Devices
Donation Goal
Donate Now Goal amount for this year: 799 USD, Received: 100 USD (13%)
Please donate to help support this website. The funds will be used to purchase owned license of LiteSpeed Web Server Enterprise (2-CPU). It provides superior performance in terms of raw speed, scalability and anti-DDoS capabilities.

Disable Write Access to Removable Storage Devices

Posted By Raymond In Category: Computer

May
7
2006

3 days ago I talked about how to disable removable storage devices such as USB drives but still allowing your USB scanner, keyboard, and mouse working.
What if you to disable write access and only allowing read access to a removable storage devices such as a USB thumb drive?
Theft of trade secrets and other corporate documentation gets easier and easier everyday. 1GB+ USB sticks can fit in your shirt pocket and that data that it can hold can be devastating to an organization. Front mounted USB ports just make it easier!

Well thanks to Microsoft, it has already addressed this concern and allows you make USB storage devices read only. This tip only works with Service Pack 2 installed in Windows XP Pro. I personally think this was a great move. Here’s how to disable write access to removable storage devices such as USB thumb drive.


Its an easy registry change:
1. Go to Start -> Run -> Type regedit and hit Enter or click on the OK button.
Browse to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

2. Create a new key called StorageDevicePolicies
Right click on the Control, select New -> Key and type in StorageDevicePolicies
Disable Write Access to Removable Storage Devices

3. Create a DWORD called WriteProtect under StorageDevicePolicies that you created in step 2 and set the value to 1.
Disable Write Access to Removable Storage Devices

This will prevent users from writing to USB drives.
Disable Write Access to Removable Storage Devices

To allow writing to USB drives just change the value to 0. Oh, you don’t need to restart your computer in order to disable write access to removable storage using the method above.

P/S: When I tried this tip, i couldn’t get it to work as I am still able to write and copy files into my USB thumb drive. Finally I found out that when I created the Key and DWORD in regedit, I accidentally added a space at the end of the word/value. After I removed the space which is invisible, it worked perfectly :D


Related posts:
  • How to disable removable storage devices such as USB drives
  • Universal Instant Messaging for Windows Mobile Devices
  • Remote Access Apple Mac OS X via Windows
    • http://surfnux.theuseless.com surfnux

      Great info. Thanks for sharing.

    • http://blog.mypapit.net mypapit

      nice trick dude, shall take note of it :), this post has made into my del.icio.us

    • Twist

      Other way is to use the USB security feature of Desktop Authority. We’ve blocked or limited the use of all security-dangerous devices. We’ve blocked usb write, cd burn, the usage of bluetooth for our developers team. But for some users we’ve granted access to all of these devices. It was not a complicated task becuase of Desktop Authority’s Validation Logic.

      http://www.scriptlogic.com/products/DesktopAuthority/

    • C.Mitra

      It is fine for disabling copying to the thumb drive from a modified machine. But what about disabling writing to a pen drive in the drive itself; what I mean is this…I have a pen drive which I insert in the USB socket of a friend\’s PC, and the PC immediately sends some malware into the thumb drive. How to stop that from happening? I don\’t want to modify the registry of my friend\’s computer. Please suggest some remedy.

    • ali

      Good info. Thank you.

    • Jens

      Eso lo haog con el USB conectado o desconectado?

    • krlos

      es facil en el adaptador trai una pestañita solo muevanla d lugar no nesesitan entrar al sistema

    • http://dani daniel

      oye hice todos los pasos pero no me funciona sigue igual ayudame

      gracias

    • http://www.metroflog.com luis

      oye gracias hice todo lo que dijiste pero lo ultimo no me sale unable to create …… eso no me sale por que?

    • Arun Kumar.M.P

      What are the advantages of disabling write access to the USB Drives ?

    • angdrak

      This not work for me without rebooting. I have Xp
      professional with servicepack 3. I need do it without reboot

    • angdrak

      was a my mistake, the method works, only if you have an already inserted key, it became readonly starting from next insertion

    • marciacatt

      ?how do you enable write to jumpdrive that has been disabled>?

    • http://www.gmask.com Nicv

      I’m looking for something similar but for Apple Mac OX 10.6 Snow Leopard, any one have any idea?

    • Alex

      Muchas Gracias, no tengo mas palabras.

    • goe_my

      It great thanks for the trick,
      i can prevent the programmer in my office cheat the code… they have to do the job just in that PC :)
      (do the job that before from other programmers)

    • http://www.datamediaexperts.com/ lto 5 tape

      This is a best to protect your data. The advantage of this, you can not copy or paste the data in USB. The good protection of your data regarding USB.

    • daniel muñoz

      It didn’t work with my pendrive kingston 16 gb. What else can I do, please???

    • SUBU

      Here is another WAY TO WRITE PROTECT the USB Flash Drive:
      1. Write all necessarry data on your flash drive before making it write protect.
      2. Boot any clean pc having windows xp in safe mode with command prompt.
      3. Insert your flash drive on any available usb port.
      4. Find your usb drive letter. it may be e: or f: or depending on the partitions on your hard drive.
      5. Go to your usb drive letter prompt and type dir e.g. e:\dir or f:\dir, just notedown the FREE BYTES. Now back to c:\>
      6. Type fsutil file createnew (driveletter)\blank.txt (free bytes you had noted) e.g. fsutil file createnew e:\blank.txt 2506664
      7. Wait until its create blank.txt on your usb drive and back to c:\> prompt .
      8. Your USB Flash Drive is now completely write protect. You may use the remaing space that you just consumed to make blank.txt, by deleting blank.txt
      9. Its recommended to keep your USB Drive virus free including autorun.inf before making it write protect.

      There are many ways to make your USB Drive free from autorun.inf
      I’ll also mention about those in my next posts.

      Thanx

    • roberto

      gracias por toda vuestra informaicion
      un saludo

    Copyright © 2005-2012 - Raymond.CC Blog