How Can we make any drive read only in windows

How Can we make any drive read only in windows

• William.Doman

  Also the following link have more information about the same

  http://thelazyadmin.com/index.php /archives/125-Creating-Custom-ADM-Templates.html

  If anyone could guide me to do the same via MS VS VC++ APIs, it would be great.

  Basically I need the set of APIs because, the control over the removable devices needs to be done with respect to the user who is logged in. Some users with admin privilege should be given access, while that of other specific users should be barred most of the time. This information should be configurable in registry.

  Or, I just want to know if the above could be achieved via imposing group policies as well..! Thanks for previous response.

  Thanks.

  
  
  

• mrlingo

  Hi

  Even I need to do something like that.

  Basically I need to make the drive that is mapped to an USB removable mass storage device - read only, as soon as I plug on in my machine.

  By this way users of the machine are prevented to ship sensitive data from other fixed drive!

  I need to code in VC++. Is there someone who could help me in this.

  Thanks,

  Kannan

  
  
  

• vishnu_gawali

  Hi

  I presume from the location of the post that you want to write some code that will stop the copying of secure files.

  As there are so many different ways to copy a file, I'd recommend that you look towards protecting the files rather than trying to alter the expected usability of peripherals. Other than that, I'd suspect you are heading into driver emulation territory .... is that somewhere you want/are capable of going

  What type of files are we talking about

  Richard

  
  

• Lovericky

  I need to know if there are some API's with which a drive mapped to USB removable storage device can be made 'read only'. All our users do not have admin privilege, but once they plug in a thumb drive, could very well copy files! :(

  Thanks.

  
  
  

• SPDOTNET

  You do this correctly by publishing network wide security policies and by not allowing normal users to log in on a local administrator account. You may be able to code something that would block a USB drive but a user could easily disable it if they have local admin access unless you made it very low level and self-protecting along the lines of some spyware or a rootkit virus. Of course, this is a lot of work for something that Windows already gives you an easy built-in way to manage and it may otherwise compromise system security. If such a program was distributed outside your company, it could also have serious legal repercussions, just ask Sony.
  
  

• Lee B.

  I think you can find what you're looking for here:  How do I prevent people from writing data to the USB port  

  This link explains how to put an entry in your system policy template to disallow writing data to USB drives. 

  
  
  
• How Can we make any drive read only in windows