protect data on usb storage device

[victor888]

Install xp on usb is very good. But how to protect the data on it if without write-protect key?

Finally I found a good way.

Using NTFS format plus abnormal directory.

Format the USB disk with NTFS format and use usb_multiboot10 to make it multiboot. Also we need make personal directory on the usb disk for example make directory UDATA which is used for storing personal data.

Open MY COMPUTER and right click the USB drive letter and only keep everyone and system account.

Only give erveryone account read right. We can find that the system account has full right thus REN_FOLDER.CMD does work.

For the sake of UNDOREN.CMD's working after first logon, we need edit this batch file, see below:

@echo off

SET USBDRIVE=

SET TAGFILE=\WIN_NT.BT

:: First Limited Range to Prevent Windows No Drive Alert due to Cardreader

:: For case of Repair Install when Drive not found, than Extended Range and

:: Windows No Drive Alert - Press 4x Continue for Cardreader Drives

FOR %%h IN (C D M N O P Q R S T U V W X Y) DO IF EXIST "%%h:%TAGFILE%" SET USBDRIVE=%%h:

if "%USBDRIVE%" == "" (

FOR %%h IN (C D E F G H I J K L M N O P Q R S T U V W X Y) DO IF EXIST "%%h:%TAGFILE%" SET USBDRIVE=%%h:

)

cacls %USBDRIVE% /e /g administrators:f

ren %USBDRIVE%\txtsetup.bak txtsetup.sif

ren %USBDRIVE%\WIN_NT.BT $WIN_NT$.~BT

ren %USBDRIVE%\WIN_NT.LS $WIN_NT$.~LS

cacls %USBDRIVE% /e /r administrators

exit

above red line is new added. So the undoren.cmd does work.

Give everyone account with full right on UDATA directory.

Use winrar open the USB drive and rename the UDATA directory to UDATA..\

Thus the directory become UDATA. under windows and not accessable.

How to open it?

Lets make a shortcut on the root directory of the usb drive. The command is cmd.exe /c "echo off&&FOR %h IN (C D E F G H I J K L M N O P Q R S T U V W X Y) DO IF EXIST %h:\usbflash start %h:\udata~1"

. Do not forget right click the shortcut again and select propties, delete %windir% from start position. OK, just click it UDATA is opened.

Edited September 23, 2008 by victor888

[victor888]

I got a way.

Format the flash stick with ntfs format and only leave erveryone group and give read right to it. Thus the system is "write protected". So I think batch file undoren.cmd, ren_fold.cmd is no use.

If you want store data on it, just give full control right to everyone group of a folder on this NTFS partion.

==

I leave "system" account with full control right for above bach files to work.

Edited September 14, 2008 by victor888

[ilko_t]

If you don't rename ~BT and ~LS folders using ren_fold.cmd before end of GUI part there will be loooooong delay at T-1 (removing temporary files)

[victor888]

I give sysytem account full right.

[victor888]

Succeed!

system account rename the folders without problem.

[victor888]

UNDOREN.CMD does work too.