Windows XP SP 2 added the functionality to make USB block storage devices read-only. In order to do so, navigate to the following key in the windows registry:
If you dont know how to make to windows registry, follow these steps.
- Go to run prompt
- Type regedit and enter
- Thats it, you made to the registry editor.
HKLM\System\CurrentControlSet\Control\StorageDevicePolicies
Remember, HKLM stands for HKEY_LOCAL_MACHINE
Add a DWORD value named "WriteProtect", and set the value to "0" to disable, "1" to enable.
This is not only useful in home (for parents) and corporate (for admins) environments, but would also be useful where data collected during incident response activities, or your tools, are written to a USB-connected thumb drive.
