Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

There is nothing nefarious about this question.

We have some temporary worker who will be doing work on some confidential information.

I would like to give them the data on a USB stick, set up as a Truecrypt traveller disk, which they can stick into one of our computers.

I would like them to be prompted for the password, the partition gets mounted, they can then work on the data, save it, shut down the computer and return the USB stick.

Is this possible?

share|improve this question
2  
You understand that you will be opening the computers up to malware that spreads via autorun on portable storage right? There is a good reason why this is disabled these days. –  Zoredache Aug 3 '12 at 18:42
    
@Zoedache If it's for a "temporary worker w/ confidential information" and an "encrypted drive", I doubt there is going to be malware. This is a good question for other people as well, like IT people who have to install programs rapidly on various computers. –  ekaj Aug 3 '12 at 22:40
    
@Zoredache: I realize that it opens up the possibility of infection, but in this case the risks are acceptable. And when the job is done, all of the machines are wiped and re-imaged anyways. The computer that would be used for consolidating the processed data would absolutely NOT have this feature enabled. –  chris Aug 4 '12 at 0:16
    
This is a good question, I've wondered about this myself... –  MDT Guy Mar 4 '13 at 18:42

1 Answer 1

Yes, there is a registry keys that effect this, it is located at

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun

or

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveTypeAutoRun

If both locations are set HKEY_LOCAL_MACHINE will override any value set in HKEY_CURRENT_USER

The value of this key is a bitmask, you need to add the values together to get the combination you want.

  • 0x1 Disables AutoPlay on drives of unknown type.
  • 0x4 Disables AutoPlay on removable drives.
  • 0x8 Disables AutoPlay on fixed drives.
  • 0x10 Disables AutoPlay on network drives.
  • 0x20 Disables AutoPlay on CD-ROM drives.
  • 0x40 Disables AutoPlay on RAM drives.
  • 0x80 Disables AutoPlay on drives of unknown type.
  • 0xFF Disables AutoPlay on all types of drives.

So if you want to enable USB drives you will need to "subtract" 0x4 from the value you have (but only if the number has the 4 bit set).

This solution works all the way from Windows 7 to XP and likely works on windows 8 but is untested by me.

Read more: http://www.fortypoundhead.com/showcontent.asp?artid=2705

share|improve this answer
    
But as a better solution, why not just have the data on a network share and have them access it though that (or must they be able to not be on the network?) –  Scott Chamberlain Aug 3 '12 at 17:42
    
The machines are not networked. –  chris Aug 3 '12 at 18:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.