Enable USB Registry Write Block on Windows

Enable USB Registry Write Block on Windows

Hello everyone,

I was wondering on how to prevent write operations on a USB storage device and came across this during my research. This cloud have some forensics or DLP policy uses. Also it can be pretty nasty(funny) prank on some user.

So here you go,

Step 1
1. Open Registry Editor
2. Navigate to “\HKLM\SYTEM\CurrentControlSet\Control\”
3. Create a key named StorageDevicePolicies
4. Create DWORD value named WriteProtect with value= 1

Notice that value = 1, enables write protection. To disable just replace value with 0

Next:
1. Right click on \HKLM\SYTEM\CurrentControlSet\Control\StorageDevicePolicies\ and choose Export Key
2. Name it “USB WriteProtect ON” and save it on the Desktop
3. Modify \HKLM\SYTEM\CurrentControlSet\Control\StorageDevicePolicies\WriteProtect with Value=0
4. Right click on \HKLM\SYTEM\CurrentControlSet\Control\StorageDevicePolicies and choose Export Key
5. Name it “USB WriteProtect OFF” and save it on the Desktop

Hope this becomes handy.

I also have written a cmd script to do this on the CMD prompt. You can download it here:usbprotect

JQ

Leave a Reply

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.