How to use USB flash drive safely and protect your USB data
34 2021-07-27 23:45
USB flash drive is the most commonly used mobile storage device, but its plug-and-play feature brings us convenience but also brings great security risks. A USB flash drive without encryption, when lent to others or accidentally lost, the data saved therein will be easily viewed or deleted. To avoid this, you just need to do a little, without the use of any software, you can make the ordinary USB flash drive "solid as gold", do not believe that friends come with me!
A, NTFS format is the basis for security; by default, the disk format of the U disk are FAT, and we just need to convert it to NTFS format, you can make the U disk can also use NTFS permissions, quotas and other security settings. The conversion method is very simple, just insert the USB drive and type "convert j: /fs:NTFS /x" in the "Run" dialog box (where "j:" is the disk letter of the local USB drive) is the drive letter of the local USB drive, "/x" means force unmount volume), enter and you will see in Explorer that the USB drive has been converted to NTFS partition. Next, we can create a USB drive with security features on this basis. Due to the characteristics of NTFS disk format, the conversion cannot be done for a 16MB capacity USB flash drive. If you are prompted with the Convert command and cannot convert it, you can unplug the USB drive and reinsert it before executing the command.
Second, my U disk will recognize people; U disk have read-only switch, it can make the U disk become read-only, so as to better protect the U disk data. But this well-known method obviously can not fully protect the data in the USB flash drive, now with the NTFS permission function, we to create a truly safe read-only USB flash drive.
Open "My Computer", click the "Tools → Folder Options → View" command in the menu bar, and remove the "Advanced Settings" option under "Simple File Sharing" under "Advanced Settings". Now, right-click on the USB flash drive and select "Properties". In the window that opens, go to the "Security" tab and set the permissions for Everyone under "Groups and Users List" to "Read Only", "Read and Run", "List Folder Directory", and then click "Add" to set your Then click Add to add your account name (LCR in this case) to the Groups and Users list and set the permissions to Full Control.
Well, now click OK to exit, you will find that the USB flash drive in addition to their own, no one else can write to the USB flash drive or delete any files, so a read-only USB flash drive will be built successfully. Because each user has "read and run" permissions, the USB drive will not prevent others from using it (but it can only be read, and for ownership reasons, you cannot change the permissions even if you take it to another computer). If your Windows XP system is patched with the latest SP2, then you can expand the "HKEY_LOCAL_ MACHINESYSTEMCurrentControlSet Control" subkey in the registry, and then create a new branch called "StorageDevice Policies". Then create a new DWORD value named "WriteProtect" in the right window, and set its value to "1". This will also make the USB flash drive read-only, when you use the key value will be deleted. However, this setting is effective for all users on the local machine, as NTFS permissions can not be as flexible and detailed permission settings.
In order to make the USB drive more secure, we can also make the USB drive "unrecognizable"; the basic operation is the same as above, in the "Security" tab window, the In the "Security" tab window, remove all users so that the USB drive cannot be used on any computer it is plugged into. Because the permission settings are saved in the USB flash drive and the system account, if you want to access the USB flash drive with such settings, you need to do different settings on different computers. 1. Use on the local computer. Although no user can access it, but the local system administrator can have the right to change it, so you can log in as the system administrator, you can open the "Security" option and add your account to the list of users (with full control), so as to achieve the purpose of operating the USB flash drive. 2. Use on other computers. To access the USB flash drive, you must first obtain ownership. After logging in to other computers as the system administrator, the system will prompt you that you cannot access the USB flash drive when you insert it, but you can change the ownership of the USB flash drive. As above, open the "Security" tab, click "Advanced", click the "Owner" tab in the pop-up window, change the owner to the current user LCR, and then set the permissions Then set the permissions to "Full Control". If your USB drive uses a FAT partition, there is also a way to disable the use of USB drives on the local machine. To do this, expand the "HKEY_LOCAL_MACHINE SYSTEMCurrentControlSetServicesUSBSTOR" subkey in the registry, and then change the "Start" value in the right window to "Start". " value in the right-hand window and change it to "4". This way when the USB flash drive is inserted into the computer, the system will not prompt the discovery of new hardware, and naturally can not use the USB flash drive. When you use it yourself, you can change the key value back, so you can prevent others from using the USB drive on our computer.
Fourth, the U disk write capacity I control; the above method seems to be a bit too absolute, in many cases our U disk will often lend to others to use. So it is better to set it so that others can only operate on a certain disk capacity will be better, and now we will use NTFS disk quota to achieve it. As above, select the "Quota" tab in the properties window of the USB flash drive, check the "Enable quota management" and "Deny disk space to users who exceed the quota limit". Click "Quota", click "Quota → New Quota" in the pop-up window, then follow the prompts to set the corresponding quota for the machine or other users of the network. In this way, when other users on this machine want to use this USB flash drive on this machine, the space it can use is the capacity that we limit in the quota item. If you want to achieve the same effect on any computer, you can do so with the help of permissions in disguise. For example, if you want to restrict a 128MB USB flash drive to 100MB, you can create a folder and copy 28MB of data into it, then set the folder to "hidden" and "permissions" to read only by yourself, so that Others will only be able to use the 100MB capacity.
Five, U disk access to the password; now there are some advanced encryption U disk, it can be restricted by a password to prevent others from accessing. Here we also manually create a USB drive that requires a password to access it. The principle is to use TweakUI to change the autoplay command of the USB drive.
Step 1: First copy a small volume of jpg and wav format files to the USB drive, then set the USB drive permissions to allow full control by the current account (LCR) only. Now, open Notepad and type the following and save it as a lock.bat batch in the c: directory. rem Note: To access the USB drive, please run the desktop "Open USB Drive" and enter the correct password @cacls j: /e /r LCR @pause Command Explanation: Run the Cacls command to change the j: (USB drive) permissions to deny LCR access. Now, create another batch unlock.bat and send it to the desktop with the shortcut name "Open USB drive" with the following content: @echo off @runas /userCR "cacls j: /g LCR:f" Explanation of the command: Run the command as LCR again. cacls command to give full control of the USB flash drive to LCR.
Step 2: Run TweakUI, expand "My Computer→AutoPlay", and check "Activate AutoPlay for removable media" under "Type". Click "Create" under "Action", then follow the instructions to create a new autoplay interface named "Access USB drive", click "Change program Click "Change Program", select "c:lock.bat", and check "Mixed Content" in the "Supported Media" list. Because the system automatically detects the file type to pop up the playback window, so before we put the image and music files in the USB drive, so that the system detects it as mixed content, and automatically executes the lock.bat file to cancel the LCR access rights.
Step 3: Right-click the USB flash drive and select "Properties", in the window that opens, click the "AutoPlay" tab, then select "Mixed Documents", then select the action bar Select "Select an action to perform" item, and select "Access USB flash drive" in the list. After the above settings, when the flash drive is inserted into the computer, the system will run the lock.bat batch process, which will set the current user permissions to deny access. If you want to access the USB drive, you can run the "Open USB Drive" shortcut on your desktop, and since the "runas" command requires a password, this is the same as cleverly setting a protection password for the USB drive.
How to use USB flash drive safely and protect your USB data