[Tool] Windows USB ...
 
Notifications
Clear all

[Tool] Windows USB Write Protect Tool v0.0.0.3

6 Posts
2 Users
0 Likes
1,072 Views
(@francesco)
Posts: 79
Trusted Member
Topic starter
 

Description

This little tool enables windows WriteProtection registry value when started (see here or here how it works), stays in the tray showing the last protection mode set, and disables the protection when closed. It provides a quick access to temporarily disable the protection for a device insertion (after a new volume is detected the protection is restored).

Since this is a first (and basically a testing) version please provide feedback.

NOTE #1 This isn't a replacement for an hardware write blocker, this is the "better than nothing" kind of tool when you don't have one.
NOTE #2 The application doesn't keep real-time track of the registry value so do not use in conjunction with other tools that may change that value.

System requirements

Windows XP and above (Statically-compiled C++ application, no VC++ runtimes required)

How to use

Just start the application and you'll find the icon in the system tray. If the icon is green the protection has been enabled, if it's red and blinking with a warning sign it's disabled. If you use Windows Vista and above you may have to either run it as administrator or as alternative give your user the permission to edit the "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies" key.

DISCLAIMER

The software is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason.

Download

Please update from v0.0.0.1 or v0.0.0.2 because if the tool was launched twice, even though I had added a warning, the second launched tool would still restore the key while exiting. As a safety measure I added a small timer (10s) that should identify unexpected changes in the key.

Windows Write Protect Tool v0.0.0.3 - Binaries

Changelog

Windows USB Write Protect Tool v0.0.0.3
- Fixed the tool restoring the key if a second instance was launched. (Please update!)
- Now the tool has a timer to check the state of the value and should warn of unexpected changes.
- Added an exit prompt when closing the tool from the tray menu.
Windows USB Write Protect Tool v0.0.0.2
- Added a popup balloon when the application is started to inform if the registry key has been enabled
- Moved strings to a string table and added italian localization
- Renamed "Insert a writeable volume" menu entry with "Disable for the next device"
- Added an error message if the application can't add the tray icon
- Added a MUTEX to limit the application to only one instance at a time
Windows USB Write Protect Tool v0.0.0.1
- Initial release

 
Posted : 27/11/2013 10:55 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

This little tool enables windows WriteProtection registry value when started, stays in the tray showing the last protection mode set, and disables the protection when closed. It provides a quick access to temporarily disable the protection for a device insertion (after a new volume is detected the protection is restored).

Francesco, pardon me but there is something that doesn't sound right (or at least that I cannot understand 😯 ) in the description (or usage) of your nice tool ) .

Can you expand on it?
Is this supposed to be "installed" and possibly autorun at Windows boot?
What happens when you "insert a device"? (I guess it only applies to "hot-swap" enabled devices, i.e. USB connected) or maybe it also applies to (e-)SATA ?
What is the point of "inserting a writable device" if - as soon as the volume is detected - the write protection is re-enabled (I presume for the just inserted device as well)?
Can you provide an "example usage" of the tool?

I am sure that it is just a matter of a misunderstanding of some kind, but I am a bit puzzled ?

jaclaz

 
Posted : 27/11/2013 11:09 pm
(@francesco)
Posts: 79
Trusted Member
Topic starter
 

Is this supposed to be "installed" and possibly autorun at Windows boot?

You can either launch it only when you need to work on evidence disks or have it launch at boot if you want the protection to be always on, depending on how often you're planning to use the tool.

What happens when you "insert a device"? (I guess it only applies to "hot-swap" enabled devices, i.e. USB connected) or maybe it also applies to (e-)SATA ?

If you use the "Insert a writeable device" entry in the menu the tool sets the WriteProtect registry value to 0 and when the next WM_DEVICECHANGE+DBT_DEVICEARRIVAL event message that is related to a volume is detected the device restores the WriteProtect value a few milliseconds after (the icon should go green again with a popup message). This allows the next volume detected after that menu entry is used to be mounted without write protection. The protection is valid only for new volumes, turning it off shouldn't affect anything currently mounted. I don't think the protection applies to eSATA since the registry is supposed to be related to the USB driver, I added that to the thread title so there won't be confusion if somebody doesn't look up what the registry value does. In case of other kind of drives there should be another key that could help (NoAutoMount) that tells Windows to not mount automatically any new volume but this tool doesn't handle that.

What is the point of "inserting a writable device" if - as soon as the volume is detected - the write protection is re-enabled (I presume for the just inserted device as well)?

The tool restores the write protection after the volume has been detected so the volume should be mounted without the write protection.

Can you provide an "example usage" of the tool?

I am sure that it is just a matter of a misunderstanding of some kind, but I am a bit puzzled ?
jaclaz

Sorry if the description wasn't clear enough, it's basically like the other free tools but it's designed to be kept always running (hence the tray icon and the writable device insertion facility).

Thanks for the feedback and let me know if you have any further questions.

Francesco

 
Posted : 28/11/2013 12:16 am
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Sorry if the description wasn't clear enough, it's basically like the other free tools but it's designed to be kept always running (hence the tray icon and the writable device insertion facility).

I see ) , what actually threw me off was (and still is) the "Insert writeable device".
You actually click on it to allow the connection of a device that is supposed to be "non-writable" as soon as the "WM_DEVICECHANGE+DBT_DEVICEARRIVAL" arrives.

Maybe it would be more intuitive to label the entry "Allow insertion of new USB device" or something like it.

jaclaz

 
Posted : 28/11/2013 12:37 am
(@francesco)
Posts: 79
Trusted Member
Topic starter
 

I see ) , what actually threw me off was (and still is) the "Insert writeable device".
You actually click on it to allow the connection of a device that is supposed to be "non-writable" as soon as the "WM_DEVICECHANGE+DBT_DEVICEARRIVAL" arrives.

Maybe it would be more intuitive to label the entry "Allow insertion of new USB device" or something like it.

I think I'll rename that to "Disable for the next device". I named it that way because that's actually the reason you use it for, to insert a new device you want to be mounted with write access (and restore the protection after Windows has mounted it) and also because an accurate menu entry text would have been much longer (and uglier) however I didn't consider that since it didn't imply the protection was turned off it would have been confusing. Thanks for making me notice that.

 
Posted : 28/11/2013 1:15 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

…. and also because an accurate menu entry text would have been much longer (and uglier)

Yes ) , I understand that, but I cannot think of anything that can be at the same time "descriptive and clear enough" while remaining "short enough" to fit in the UI of the tool, "Disable for the next device" sounds good to me, but maybe some of the English mother tongue members may suggest something more suitable.

jaclaz

 
Posted : 28/11/2013 8:54 pm
Share: