How To Prevent Windows XP Users From Writing To USB Drives

Contributor Icon Contributed by shamanstears Date Icon August 2, 2006  
Tag Icon Tagged: Windows security

USB drives are extremely handy tools, but in some instances it might not be a good idea to allow users to write onto these devices from their PCs. This is especially true when working with highly confidential data or intellectual property at work. Users of Windows XP with service pack 2 installed can disable writing to USB devices.


To do this:

Open the Registry Editor click on the Start button on your taskbar, then click on Run and type “regedit” and click on OK to start the regedit utility.

Expand HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control.

From there right click and create a new key and name it “StorageDevicePolicies”. In the window on the right then create a new DWORD value and label it WriteProtect, give it a value of “1″ and users can no longer write to USB drives. To re-enable this option change the value to 0 and users are again allowed to write.

The modifications you made will be in effect after you reboot your PC.

Previous recipe | Next recipe |
 
  • setiyana
    maybe you can tray this

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR]
    "Type"=dword:00000001
    "Start"=dword:00000003

    change the value from : dword:00000003
    become: dword:00000004 to deactivate, meaning

    3 for enable and 4 for disable. without restart the PC
  • Sebastian Alduncin Pisanty
    The problem with this approach is that you get freezed against viruses and stuff...
    when the antivirus try to erase or remove the virus, malware, the file just can“t because this ReadOnly policy...
    so a better approach would be a selective policy for some programs...
    I give this piece of information to see if someone would have a solution.

    Thanks.
blog comments powered by Disqus