Skip to content

Latest commit

 

History

History
17 lines (13 loc) · 896 Bytes

Group-Policy-Method.md

File metadata and controls

17 lines (13 loc) · 896 Bytes

The registry values that are added and deleted in this version of the USB write blocker come in part from the

HKLM\SYSTEM\CurrentControlSet\StorageDevicePolicies\WriteProtect value, however the remainder can all be enabled using the Group Policy Editor.

If you are running a Windows 7 Pro/Ultimate/Enterprise machine, or any Windows 10 machine, you can click on the Windows Logo (start) and type gpedit and select 'Edit Group Policy'.

From here, expand:

- Administrative Templates
- System
- Removable Storage Access
- Double-click the 'Removable Disks: Deny write access' policy. Select Enabled, then apply.

This will write-block access to any newly mounted external devices. You should test this on a non-evidence drive first to ensure the policy is applied.

To disable, follow the above process, except select Disabled or Not Configured.