0

My laptop has been policy enforced to write only on Encrypted USBs like Kingston DataTraveler 4000. Other USBs are read-only and not writable.

Are there any tweaks to have this removed.

I read one from Is it possible to restrict USB keys to only certified ones, and block that key's access on other computers

2
  • 1
    You mean when you are part of a domain which is managed with Active Directory? Generally no, until you leave the domain or the server manager changes the policy for you. Or you change the vendor and device id by modifying the firmware like it is mentioned in the linked question.
    – user6090
    Dec 11, 2015 at 19:56
  • 1
    You say My laptop. Do you own the laptop or is this your company's computer? I'd be surprised if your computer has policies on it that you can't change. Dec 12, 2015 at 0:37

1 Answer 1

2

If your laptop is policy-enforced, then you must petition whoever has created your policy to change it. There is no known exploit to change this (other than getting admin access, which isn't really an exploit).

I would strongly recommend against trying to break out of your policy because these protections are usually put in place for a reason, even if that reason is silly. Besides, if there is a way for you to break the policy, malicious actors can also break the policy which is a serious security risk. Regardless, the question you have linked seems to be the best way to do things.

Not the answer you're looking for? Browse other questions tagged .