Advertisement By now, you should know that using USB storage on your computer is a USB drives are useful for so many different things, but they can be problematic and dangerous if you don't take the right precautions. Rather than risk malware infections (e.g. Trojans, keyloggers, or ransomware), it may be better to completely disable USB storage devices if your system has lots of sensitive data on it. Here’s how to do that on Windows, Mac, and Linux. Blocking USB Storage: Advantages and Disadvantages If you’re concerned about the potential for malware to be introduced to your computer via USB storage, then it is wise to consider disabling support. But it comes with a key disadvantage. Most obviously, you’ll be unable to use USB storage on your computer. If you’re able to use cloud storage with ease, this shouldn’t be a problem. However, if you need a means of regularly exchanging data between two computers and the cloud isn’t an option, it might be tricky. Consider a tool like Resilio Sync to Syncthing and Resilio Sync (previously BitTorrent Sync) can sync files between your computers and require zero knowledge of how to set up a server. But which solution works best for you? Meanwhile, blocking USB can prove to be time intensive if you don’t know what you’re doing. We’ve provided steps below for doing just that on Windows 10, Mac, and Ubuntu 18.04. ![]() How to Disable USB Storage on Windows Blocking USB storage on a Windows computer is straightforward. You also have several options; the first two below are for Windows 10 Home PCs. Manually Edit the Registry Begin by pressing Win + R, then enter “regedit”. Note that if you’re planning on making changes to the system registry, you should Editing the Registry unlocks some cool tweaks, but can be dangerous. Here's how to back up the Registry before making changes so they're easily reversed. Create a Registry Script Alternatively, you can perform a text-based version of the same task by creating two empty TXT files in Notepad. The methods which I am using are, How to Create Bootable USB for Mac with TransMac? Which Includes App Drives, devices and Mac Formatted File System, USB Flash Drives, and other storage devices. The Other feature which TransMac has, is the burn ability, which can burn disc images. Launch the text editor, and input Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services USBSTOR] 'Start'=dword:00000004 [HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services USBSTOR Enum] 'Count'=dword:00000000 'NextInstance'=dword:00000000 Save the file as disableusb.reg, taking care to ensure that the.TXT file extension has been replaced with.REG, otherwise it won’t work! Next, repeat the procedure, saving as enableusb.reg. With the second file, make an edit to the line. 'Start'=dword:00000004 Changing it to: 'Start'=dword:00000003 Save the file when done. Now, whenever you need to disable USB storage, run disableusb.reg. Any devices already attached will be unaffected, however, until they’re replaced. Should you need to re-enable USB storage, use enableusb.reg. Save the files somewhere easy to remember. Preventing others from using enableusb.reg shouldn’t be too difficult. Only an administrator account can run the file, so as long as you don’t share your profile (and keep it locked when you’re away from keyboard) it should be simple to keep secure. Use Group Policy Editor A third option is available to Windows 10 Pro and Enterprise: editing the setting for USB storage in the Group Policy Editor. Press Win + R to start, and enter “gpedit.msc”. This opens the Group Policy Editor, where you should expand Administrative Templates > System > Removable Storage Access. In the right-hand pane, you’ll see several items that control media access on your computer. Three of these need to be enabled: • Removable Disks: Deny execute access • Removable Disks: Deny read access • Removable Disks: Deny write access In turn, double-click each item and click the Enabled radio button. Click OK to confirm before moving onto the next item. Now, whenever a USB storage device is attached, an Access is denied message will appear in Windows Explorer when you attempt to open the drive letter. To reverse this, change the three settings listed above so that each is set to Disabled. How to Restrict USB Storage Devices on Mac To restrict USB storage on your Mac, first use our guide to. Then open Utilities > Terminal and unload the driver. Kextunload /System/Library/Extensions/IOUSBMassStorageClass.kext/ Next, open /System/Library/Extensions and rename (or move to a safe place) IOUSBMassStorageClass.kext. A sensible rename might be to change the.KEXT extension, so you can easily find it again should you wish to re-enable USB storage. With that done, return to the Terminal and enter: sudo touch /System/Library/Extensions This will delete the cache files, forcing a rebuild without reference to the renamed file.
0 Комментарии
Оставить ответ. |
АвторНапишите что-нибудь о себе. Не надо ничего особенного, просто общие данные. Архивы
Март 2019
Категории |