Archive for August, 2010


Read only access to USB device

In some cases you want users to access the USB device but you dont want them to copy important company documents.

In that case

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies]
“WriteProtect”=dword:00000001

Just copy the above command and paste in a notepad and save it as DisableUSBWrite.reg

Then double click on the created reg file.

Job is done.

Many of you would have thought is there any simple way of disabling or enabling USB device in your Computer.

For those who are searching for this you have got it.

You can do it in 2 ways.

1. Using the registry – If u wanna do it in 1 or 2 computers or in a workstation environment.

GOTO Start -> Run -> REGEDIT

HKLM\System\CurrentControlSet\Services\usbstor

On the right side select start and change the value from 3 to 4 to disable USB access.

2. Using the group policy – If u have a Domain and u wanna block USB in all the computers in ur network.

Check with Microsoft kb for doing the above. Here is the link

http://support.microsoft.com/kb/555324

In Internet explorer 7 there is a feautre called Protected mode, which works in Vista or Windows 7 but not in XP and below versions.

Here sometimes you might have come across with this situation. Eventhough you turned ON the protection mode by going to Tools -> Internet options. Still it will show Protected mode: off.

The reasons are

1. If the User access control is disabled then this protected mode feautre will not work.

2. If you are running IE 7 with administrative privilges.

In vista or Windows 7, Microsoft introduced a new feautre called User Access Control(UAC). Its mainly introduced to increase the security but when we attempt to see that window repeatedly its more irritating rather than providing security. So here are the steps to disable and enable the UAC

1. Start -> Run -> Msconfig -> Tools -> Enable or Disable UAP. But the above one requires a reboot.

If you want to avoid reboot please follow the below 2. Start -> Run -> Regedit 3. HKLM-> Software -> Microsoft -> Windows -> Current version -> Policies -> System

On the right hand side window double click on “EnableLUA” and change the value from 1 to 0 If u want to enable UAC then change the “EnableLUA” value from 0 to 1.

4. U can also do the same thing using Control Panel -> User accounts settings but its beating around bush.