How can I disable access to specific USB drives (but not all)

ddd990 · 27 Oct 2016

I have 3 USB drives permanently connected to my Win 7 Pro machine. One of which I want access to all of the time, which is why the solution that disables ALL usb drives that I found not applicable. The other two are backup drives that I only want to use once a week during the backups.

It's dangerous to keep my backup drives connected all of the time, were I get to catch some ransomware on my web travels. I want my backups to be offline 99% of the time.

Currently I disconnect them physically, but I'd be just as happy if I could have a few shortcuts on my desktop to some registry settings that would allow me to simply disable access to them. I have looked in the drive properties and see that I can change security permissions but I might end up making the drive inaccessible forever if I get it wrong.

Anyone else had such a minor dilemma as this and found a better way?

edit: I'll be looking for a Win 10 compatible solution as I'm transitioning over to a Win 10 machine and once switchover day happens, these USB drives will be plugged into the new machine instead.

Ranger4 · 27 Oct 2016

I can't see how that can be done. Is it really too hard to just disconnect the back up drives after doing the back up.

Even if you could do what you want, there is no guarantee that the attached external drives would be insulated from a virus attack & they could also be damaged in the event of a major electrical failure on the computer.

Back up drives should be stored in a safe location & not left attached to the computer.

ddd990 · 27 Oct 2016

Ranger4 said:

I can't see how that can be done. Is it really too hard to just disconnect the back up drives after doing the back up.

Even if you could do what you want, there is no guarantee that the attached external drives would be insulated from a virus attack & they could also be damaged in the event of a major electrical failure on the computer.

Back up drives should be stored in a safe location & not left attached to the computer.

No it's not too difficult disconnecting, it's what I've been doing for a long time. You're right, I shouldn't leave them connected, but I'm a lazy SOAB and quite like the idea of a double-click on an icon to enable or disable a drive.

Ranger4 · 27 Oct 2016

Thanks for getting back. I do a weekly back up as well via a USB external drive & have to do the same disconnect routine as you do, so it's just one of the annoying computer housekeeping chores that has to be done. :)

LMiller7 · 27 Oct 2016

The idea of isolating USB drives from malware by software methods is flawed in principle. Such methods may well exist but their value as a security measure is virtually nil.

Anything you can do with software - registry settings, security settings, etc, can be reversed by malware. As malware can be assumed to be running with at least elevated admin rights (it is pretty hard to do anything with less) it will have full access to the computer. Few people imagine how sophisticated malware has become in recent years. Malware authors are experts in evading security. If a USB port could be taken offline with software it is almost certain that malware authors would know all about it. Disabling such protection would be done as a matter of routine.

Megahertz07 · 27 Oct 2016

There is no better way than psychically disconnect it. Not only for security (virus ) but also to save the bearings. Also rotating disks are very sensitive to impacts.
To just disable it, just un mount it.

NoN · 31 Oct 2016

If you know the number of your USB ports where the drives are plugged in, you can try to disable the ones you don't need directly in the BIOS. Most motherboards have that feature since few years now. Then re-enable them when you need. It's only a key to pres each time you have use them.

Same manner as unplug the drives manually but with your keyboard and Bios.

Layback Bear · 02 Nov 2016

I must be a lucky computer owner.
I have no problem unplugging a external device. The difficulty factor is ZERO. Time consumed is seconds.

I do agree with LMiller7's post #5.