6

There is nothing nefarious about this question.

We have some temporary worker who will be doing work on some confidential information.

I would like to give them the data on a USB stick, set up as a Truecrypt traveller disk, which they can stick into one of our computers.

I would like them to be prompted for the password, the partition gets mounted, they can then work on the data, save it, shut down the computer and return the USB stick.

Is this possible?

4
  • 2
    You understand that you will be opening the computers up to malware that spreads via autorun on portable storage right? There is a good reason why this is disabled these days.
    – Zoredache
    Aug 3, 2012 at 18:42
  • @Zoedache If it's for a "temporary worker w/ confidential information" and an "encrypted drive", I doubt there is going to be malware. This is a good question for other people as well, like IT people who have to install programs rapidly on various computers.
    – cutrightjm
    Aug 3, 2012 at 22:40
  • @Zoredache: I realize that it opens up the possibility of infection, but in this case the risks are acceptable. And when the job is done, all of the machines are wiped and re-imaged anyways. The computer that would be used for consolidating the processed data would absolutely NOT have this feature enabled.
    – chris
    Aug 4, 2012 at 0:16
  • This is a good question, I've wondered about this myself...
    – MDT Guy
    Mar 4, 2013 at 18:42

1 Answer 1

2

Yes, there is a registry keys that effect this, it is located at

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun

or

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun

If both locations are set HKEY_LOCAL_MACHINE will override any value set in HKEY_CURRENT_USER

The value of this key is a bitmask, you need to add the values together to get the combination you want.

  • 0x1 Disables AutoPlay on drives of unknown type.
  • 0x4 Disables AutoPlay on removable drives.
  • 0x8 Disables AutoPlay on fixed drives.
  • 0x10 Disables AutoPlay on network drives.
  • 0x20 Disables AutoPlay on CD-ROM drives.
  • 0x40 Disables AutoPlay on RAM drives.
  • 0x80 Disables AutoPlay on drives of unknown type.
  • 0xFF Disables AutoPlay on all types of drives.

So if you want to enable USB drives you will need to "subtract" 0x4 from the value you have (but only if the number has the 4 bit set).

This solution works all the way from Windows 7 to XP and likely works on windows 8 but is untested by me.

Read more: http://www.fortypoundhead.com/showcontent.asp?artid=2705

3
  • But as a better solution, why not just have the data on a network share and have them access it though that (or must they be able to not be on the network?) Aug 3, 2012 at 17:42
  • The machines are not networked.
    – chris
    Aug 3, 2012 at 18:19
  • This doesn't work at all. There is no "NoDriveTypeAutoRun" under HKEY_LOCAL_MACHINE and under HKEY_CURRENT_USER there is even no "Explorer" folder. So I tried manually creating the DWORD under both paths and set the value, but it had no effect. Aug 15, 2015 at 7:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .