Write Protect USB Devices in Windows XP


by Dustin Hurlbut

In the recent release of Windows XP Service Pack 2 (SP2), a new feature was added by Microsoft to allow the write protection of USB block storage devices.  This entails a simple Registry modification that requires no hardware devices to write protect thumb drives.  This allows us to examine and duplicate USB devices with write protection that previously didn’t exist.

To enable this feature, we’ll go step by step to modify the Registry.  As in all Registry operations, it is advisable to back up your Registry files prior to modification.  You can do this easily by either creating a Restore Point in XP or by using FTK Imager to look at your own drive and export the Registry Files.
To create a Restore Point, go to Start > Programs > Accessories > System Tools > System Restore.   Once at the System Restore dialog  box, select “Create a restore point” and follow the steps.  This creates a backup of selected system files that can then be enabled to restore the system
back to the state it was in.

To create the necessary Registry values to enable USB write protection, follow these steps:

Step 1 – Go to Start > Run and type in regedit.

Step 2  – Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet and highlight the Control
key.  The CurrentControlSet key has system information about the current configuration of the machine.
The system keeps a backup of this key.  You will see the current and backup listed as ControlSet001 and 002 in this example.  The select key will show which is valid.  The key CurrentControlSet is the one being used at this moment and is the one you want to modify.

Step 3 – Right click on Control and select New > Key.  Name the key StorageDevicePolicies.

Step 4 – Right click on StorageDevicePolicies and select DWORD. Name the value WriteProtect.

Step 5 – Right click (or double click) on WriteProtect and select Modify.  To write protect USB devices select 1 as the value.  To turn off write protection, change this value to 0.

We have created a new key and value in the Registry that will write protect USB devices.  You may want to place this on your examination machine full time.  However, if you need to be able to switch back and forth from a write protected state to an non write protected state, it is cumbersome to have to go through this procedure each time.  To automate this process, create a .REG file to enable you to select either on or off.

To create a write protect switch, right click on the key storageDevicePolicies we just modified and select “Export”. Name it and you can send a file with the extension of  .reg to your Desktop.  Name it
“USB Write Protect ON”.

Recreate the key with the switch turned off to un-write protect the USB making another .reg file.  You can activate either .reg file by clicking on it to modify the Registry key.

Be sure to test and verify this procedure and write protect function.

source:

The National Center for Forensic Science (NCFS)

About these ads

11 thoughts on “Write Protect USB Devices in Windows XP

  1. Pingback: Secure Apache and USB protection - Pierig’s Page

  2. thanks it works on my usb..but here is another problem that when i m formatting 4 gb usb it stuck on 100% and window showed that winows was unable to complete the format…. pls help me to solve this problem thanks….

  3. I hardly leave a response, but I browsed a
    few responses on Write Protect USB Devices in Windows XP Situsnya WordPress.
    I actually do have a couple of questions for you if you tend not to mind.
    Could it be just me or do some of the remarks look
    like they are written by brain dead people? :-P And, if you are posting on other places,
    I’d like to follow anything fresh you have to post. Would you make a list of every one of all your shared pages like your Facebook page, twitter feed, or linkedin profile?

  4. Hmm it appears like your website ate my first comment (it was extremely long) so I guess I’ll just sum it up what I had written and say, I’m
    thoroughly enjoying your blog. I too am an aspiring blog writer but
    I’m still new to the whole thing. Do you have any tips and hints for beginner blog writers? I’d
    certainly appreciate it.

  5. I was wondering if you ever thought of changing the layout of your website?

    Its very well written; I love what youve got to say. But maybe you could a little more in the way of content
    so people could connect with it better. Youve got an awful lot
    of text for only having 1 or two pictures. Maybe you could space it out
    better?

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s