[jackstiller]

Did any one answer simple question... is there any way to LOCK CD Writing & USB Drives without using... any kind of software... I m talking about programming in any language... help full if it is in Dot Net...

Waiting for reply...


Regards.
Jack

[retsoksirhc]

You mean lock as in like... encrypt what's on them, so nobody else can see it? Or lock a CD drive, like so it can't get ejected?

[jackstiller]

You mean lock as in like...encrypt what's on them, so nobody else can see it? Or lock a CD drive, like so it can't get ejected?

I just want to say that... after locking Drive... nobody can use that... even it is there... u can eject... drive... play movie and all kind of stuff related to play CD but don't have the permission of Writing any data... and I want to do that by Programming, not by using any kind of software... for assistance you can search a software... lock my drive... I will let you understand better...


Please help me...


Regards,
Jack

[NeedKarma]

nobody can use that....even it is there.....u can eject .....drive.....play movie and all kind of stuff related to play CD but dont have the permission of Writing any data.

Uninstall any CD writing software and disable Microsoft's CD writing sewrvice (ImapiService)

Good luck with the USB issue, admins have been trying to figure that one out for a while since it could be a security risk in companies.

[jackstiller]

Uninstall any CD writing software and disable Microsoft's CD writing sewrvice (ImapiService)

Good luck with the USB issue, admins have been trying to figure that one out for a while since it could be a security risk in companies.

Yep... thank you for reply... well there is a software which actully hook the CD Writing service provided by Microsoft and lock that... then no CD writing software will able to write any kind of CD just give error like "Under Buffer Reader error" if Nero used.

But I don't know how to code that how to hook the service of the windows and lock it with password... can you please tell me... if you know... and abut USB the same is with the USB Drive... can anybody tell me how to programme that...

Wating for reply...

Regards,
Jack

[jstrike]

Registry Hack to Disable Writing to USB Drives :: the How-To Geek
Works with XP SP2 and Vista. However if the other users have admin rights they can change it back.

[NeedKarma]

Registry Hack to Disable Writing to USB Drives :: the How-To Geek
Works with XP SP2 and Vista. However if the other users have admin rights they can change it back.

Cool find! But when I look at the registry entry and I wonder how it knows it's only for USB interfaces.

[Curlyben]

Actually the USB one is quite straightforward.
You can disable them completely by using hardware profiles ;)
Microsoft Corporation

[jstrike]

Actually the USB one is quite straightforward.
You can disable them completely by using hardware profiles ;)
Microsoft Corporation

Nice, but how do you stop the user from selecting a different profile when they boot?
If you only have one profile are the administrators or people in the admin group bound by that profile since it's set at boot time?

[Curlyben]

I haven't used profiles in a live environment so I have no idea, but as it is directly hardware related, admins need to reboot to re-enable the USB's.

Hey I covered this a while ago on my MSCE and as I haven't used it I've forgotten most of it ;)

[jstrike]

Here's a good thread on disabling write access to the CD/DVD drive:
How to disable write access for CD/DVD drive? - microsoft.public.windowsxp.security_admin | Google Groups

NeedKarma's solution is also mentioned in there.

[jackstiller]

Hi!

Thanks for reply..

actully... I tried all these but failed... I done the registry entry... but if any body whether he /she is guest he can remove by go to device manager... and delete the Usb interface... drive... this will put back USB ON... so... it didn't work... any other solution...

and the registry entry to remove / lock USB is :-

Go to : Run---Type Regedit----and then go to... "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servi ces\USBSTOR"

and change the value of "Start" to 1 to disable USB Drive and put 0 to enable USB Drive

Waiting for reply...

Jack

[retsoksirhc]

You need to only enable your account to be able to edit the registry then, and password protect it.