5

I am having a 8GB pen drive, I need to put a PowerPoint into that and make it read only. Rest of the space should be usable for the user.

Assuming the user will be using Windows only, what are my options to do that?

I went through other answers present on SuperUser, but none could solve my problem completely.

Is partitioning the pen drive, and then making 1 partition as read only, a solution to this? If yes, then please guide me how to do that.

  • possible duplicate of how to write protect a USB key? – Art Gertner Sep 29 '14 at 16:02
  • no this is not a duplicate, here I am sure of the OS. so I am looking for a windows specific solution – Mitaksh Gupta Sep 29 '14 at 16:22
  • also the solution provided there tells me to create an ISO and mount it on pen drive, but it didnt give me a solution of how to make that ISO part as read only. and rest of the pen drive will still be usable to the user – Mitaksh Gupta Sep 29 '14 at 16:32
  • 4
    The problem here is that, no matter what OS you have, the end user, if he has the pen, can eventually bypass any reasonable protection you have in place. The duplicate question mentions NTFS write permissions, which may work well. Another thing you could do is to use Information Rights Management. – Doktoro Reichard Oct 2 '14 at 8:43

10 Answers 10

9
+50

Answers to questions like this depend on the so-called "attack model" that you want to be protected from. In other words, will the user actively try to overcome your protection? Or is the protection there just to warn the user, which you trust to be honest with respect to the read-only setting and not try to overcome it?

In the second case, setting the read-only flag in the file properties should be enough. When the user will open your file, the program will tell him that the file is read-only and they cannot save it. If the user is honest, he will not do anything.

The first case is much more difficult, and actually there is very little to do about it. Giving a USB pen to someone is much like giving them a paper sheet with pencil writing on it. There is no way you can prevent your user from erasing some part of your sheet and writing again on it, no matter what you write in it (in this metaphor there is no equivalent of the pen; everything that you write on a USB pen is erasable and re-writable; if you want to have a pen equivalent, you have to write on a CD-ROM).

In this metaphor, setting the read-only flag is no different from writing (in pencil): "Please, do not erase of modify things here". If the user is honest, they do not do it. But there is no technical mean that prevents them from doing that if they are not honest.

So, in this case, the answer is basically "no".

There is a partial workaround that may or may not be applicable to your case: you can add a digital signature to the file you want to protect. The user is still able to modify the file, but thanks to the digital signature this leaves evidence that the file was modified. However this is a very broad topic, which has in turn other caveats, and it would be off-topic to discuss it here.

5

Enable CD drive mode in USB stick firmware

Quick answer: Scroll down.

Long answer:

Is partitioning the pen drive, and then making 1 partition as read only, a solution to this? If yes, then please guide me how to do that.

There seems to be a lot of talk (and confusion) out there about having read-only partitions on usb sticks, the idea being to make it look like a CD drive to windows so the files are protected.

Multiple partitions don't work with windows.

Story goes, we could have 2 partitions on the drive with a read-only iso image in one, and a regular FAT32 partition for the other.

Works great with linux, not with windows. You can overwrite the whole usb stick with an iso image and windows will treat it as a CD drive (even the bios can boot from it if it's an hybrid image !) but that's all. If the image is in a partition windows doesn't know what to do with it anymore. And as harrymc pointed out, windows doesn't like multiple partitions on removable drives anyway.

U3 sticks, however, do just that !

U3 sticks have special firmware to emulate a CD drive in addition to the normal usb drive, and so show up as two different drives. The CD drive is normally used to deliver proprietary content, and so not under user control. For all practical purposes the files inside it are protected (changing it requires reprogramming firmware).

Good news is, U3 sticks came out a while back and now it seems pretty much every usb stick has this functionality built-in even if not used at all by default (!) There's even an opensource tool (u3-tool) that allows to manipulate the CD image for U3 compatible devices.

The bad news: we have to mess around with the stick's firmware, most of tools are windows-only, come from china, are extremely technical if not downright obscure, and we might well blow it all up with the wrong settings. Alright, it's not going to be pretty...

Easy case: it works with u3-tool

  • Your stick is in the supported devices (or you feel adventurous and just try)
  • Create an iso image with your file(s) in it (genisoimage / isomaster / your favorite burning tool)
  • Replace usb stick's CD image with your own using u3-tool.

General case

Following mostly comes from this great tutorial:

  • Find out what chip the stick has.
    ChipGenius and Flash Drive Information Extractor are particularly good at that. Get latest version from flashboot.ru (Yes it's in russian, did i forget to mention we'd be visiting russia along the way ? Get chrome to translate the page for you it'll be alright).
    Chip is Phison or SMI ? We're in business, others i don't know.
    For example, i have a Kingston Data Traveller stick and it turns out to be Phison-based.
  • Lookup device's VID & PID you got in previous step in flashboot.ru's database to find out which tool you need. ChipGenius might tell you as well. Looks like it's MPAll for Phison chips (you need the right version), UFDisk Utilities for SMI etc. Download and install from flashboot.ru.
  • If you end up with MPAll as well, follow the tutorial and try to get the settings right (good luck). In the F1 part you want 2 partitions: one cd-rom, and one removable disk. Set the partitions sizes, iso image etc. Flash the drive and pray.
    For UFDisk Utilities, follow the tutorial in vinayak's answer.
  • Your usb stick now (hopefully) comes up as a read-only CD Drive with your presentation in it, and a read-write removable drive for the user.
  • As a side note, this can also be used to have the drive present itself as a fixed drive instead of removable media, which can be quite useful in some situations. – lemonsqueeze Oct 8 '14 at 21:05
3

Any file/folder containing * in their name will be read-only in Windows.

Even admin can't delete or modify it. Remaing space is available for other use. Formting the device will delete it. As * is a invalid charactor for a file name you can't add it to a file name from Windows. In order the rename the file, boot into a linux OS and just rename it. Tested on Windows 7, from Ubuntu, NTFS formatted pen drive. FAT fs may not support.

  • How is it ? Is it work ? – totti Oct 7 '14 at 10:22
2

I would suggest exporting the presentation as a PDF document and using the Acrobat Pro features to digitally sign the document, turning on the modification protection as part of that. This will prevent someone from modifying the presentation, however they could just attempt to reproduce the master from scratch on a blank presentation by copying and pasting all the content.

See http://www.adobe.com/uk/epaper/tips/acr5digsig/

1

Your USB pen drive is classed by Windows as "removable" disk. This behavior cannot be changed without hacks to Windows that your users might not appreciate.

On a "removable" drive, Windows will only recognize the first Windows-formatted primary partition in the partition table, which means that it is not possible to partition such a disk into multiple partitions. Although some utilities can do that, especially on Linux, only the first partition will then be usable by Windows, which renders multiple partitions useless on pen drives (at least for Windows).

Your only Windows solution is to set the presentation file's permissions to read-only, which is a very mild protection that is easily undone in Explorer.

In short, whatever you do to the drive as administrator on your computer, can be undone by another administrator on another computer.

The only solution I can see to making the presentation truly read-only, is to distribute it via the Internet, using a specialized website. This way the presentation can be viewed, but you control its sharing and permissions.

Here are some websites that are worth looking into (in alphabetical order) :

authorSTREAM
Google Drive: Presentation
Emaze
PowerShow
Prezi
SlideOnline
SlideShare

These websites normally have both free and commercial subscriptions, and some are more well-known than others. I have no personal preferences among them.

1

Your best bet is to hire the services of a company that preloads data onto USB flash drives. This is possible and here are two websites that offer this service:

http://www.usbpromos.com/special-options
http://www.maikii.eu/data-preload
http://usbmedia.us/preload.php

If you're not concerned about the user not being able to remove the pre-loaded content, maybe you'd prefer something like isostick which is a flash drive that shows up as an optical drive as well as a USB flash drive.

If you'd rather they not be able to remove the pre-loaded content and you'd prefer to go the DIY route, you might want to read this article. It explains how you could use a tool called SMI UFDisk Utilities to create write-protected partitions on USB flash drives with Silicon Motion Inc. (SMI) controllers (e.g. Lexar USB flash drives). You can use ChipGenius and FlashGenius to find out what controller your USB stick is using.

There's another tool called DM UDisk AP (VirusTotal scan result) that claims to be able to do the same for flash drives with AppoTech DM Controllers (SanDisk, Transcend, Apacer, etc. according to the blog post).

Nevertheless, you could use ChipGenius to find the model and make of flash memory chips used in the flash drive and search for their respective manufacturer tools that allow you to create a read-only partition.

0

If you dont want to show your presentation or give security to certain folders then I suggest you to download a folder locker and keep your files in that. one you can find here. or you can try others. It will only lock the files which you keep in it other space is free to use for anyone.

The second thing if you just want to make it read only then I suggest you to see this one. http://www.sevenforums.com/tutorials/122666-permissions-allow-deny-users-groups.html

you can simply make it as read only but anyone can easily change the permission of files or folders so In my opinion download a folder locker or set a password for your presentation.

Or just convert it to a pdf file as pdf gives better security.see this

0

Put the file in a zip file

The easiest and portable way of protecting a file from accidental modification is to put it into a zip file. Almost all OS spports read from zip. In windows while accessing the data from a zip file they are copied to a temporary folder. So the changes are not saved. A good third party zip manager ask for user conformation before saving the changes to a zip file.

0
  1. Go to HKEY_Local_Machine=>currentcontrolset=>control
  2. Create a new folder with name StorageDevicePolicies by rightclicking on control.
  3. Right click on storagedevicepolicies and create DWORD32bit with a 0 value. Press enter.
  4. Reboot system. and check you can format your pendrive with no read only error.
-1

I think all people that answered your questions, gave a wonderful suggestions and shared opinions. So, a long with what they mentioned, I'll drop this post.

As far as I know, you can't make .PPT read-only as long as the file is a powerpoint file it'll be editable, but you can do it if you change the file type. If you save a copy of it as .wmv this will save your presentation as a video, so other people cannot edit your actual presentation unless if they have the source file .pptx.

Users permissions also can be bypassed, so there is no guarantee using this method.

In addition, answering your question about flash drive partition, in default, Windows cannot read flash drive partitions, so If you create some partitions on your flash drive, Windows will only read one partition, the others will be not shown on the system, but it'll show up in third party tools.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.