completely disable usb storage...write a mini filter driver ?
in [Device Drivers]
|
Prev: SD card ID reading... same issue
Next: A challenging opportunity for Linux kernel/ Firmware Developers from Dexcel Electronics Designs, Bangalore
From: unclepauly on 21 May 2010 06:14 hello, our software goes in schools and some teachers have requested that they be able to enable/disable usb sticks. this is becasue the kids keep bringing in locked down exes such as firefox on usb stick. i have already written a mini filter driver for keyboard and mouse using the samples in the WDK (7600). i just needed these devices to be enabled/disabled too and i do so by dropping all the packets in the ServiceCallback. i made it apply to all keyboards and mouses by installing the two drivers at class level in the registry. so now i am looking to do the same for usb sticks. all i really need is for the usb mini filter driver to prevent reading/writing/copying/pasting. so again this must be applied to all usb sticks, at the class level. there are a few usb samples out there, usbsamp, osrusbfx2, toaster - which is the best starting point for me to do this ?
From: Maxim S. Shatskih on 21 May 2010 08:13 Just disable the USBSTOR service. -- Maxim S. Shatskih Windows DDK MVP maxim(a)storagecraft.com http://www.storagecraft.com "unclepauly" <unclepauly(a)discussions.microsoft.com> wrote in message news:8B0E7F2E-EF5F-4B43-AE2F-90D46B4D6296(a)microsoft.com... > hello, > > our software goes in schools and some teachers have requested that they be > able to enable/disable usb sticks. this is becasue the kids keep bringing in > locked down exes such as firefox on usb stick. > > i have already written a mini filter driver for keyboard and mouse using the > samples in the WDK (7600). i just needed these devices to be enabled/disabled > too and i do so by dropping all the packets in the ServiceCallback. i made it > apply to all keyboards and mouses by installing the two drivers at class > level in the registry. > > so now i am looking to do the same for usb sticks. all i really need is for > the usb mini filter driver to prevent reading/writing/copying/pasting. so > again this must be applied to all usb sticks, at the class level. there are a > few usb samples out there, usbsamp, osrusbfx2, toaster - which is the best > starting point for me to do this ?
From: Don Burn on 21 May 2010 08:21 This isn't a USB issue, either disable USBSTOR.sys which will take care of the problem, or if you want something more write a disk filter that checks in AddDevice if the device is on a USB bus, and if so creates the device object with a unique device type so it is not recognized as storage. Don Burn (MVP, Windows DKD) Windows Filesystem and Driver Consulting Website: http://www.windrvr.com Blog: http://msmvps.com/blogs/WinDrvr > -----Original Message----- > From: unclepauly [mailto:unclepauly(a)discussions.microsoft.com] > Posted At: Friday, May 21, 2010 6:14 AM > Posted To: microsoft.public.development.device.drivers > Conversation: completely disable usb storage...write a mini filter > driver ? > Subject: completely disable usb storage...write a mini filter driver ? > > hello, > > our software goes in schools and some teachers have requested that they > be > able to enable/disable usb sticks. this is becasue the kids keep > bringing in > locked down exes such as firefox on usb stick. > > i have already written a mini filter driver for keyboard and mouse using > the > samples in the WDK (7600). i just needed these devices to be > enabled/disabled > too and i do so by dropping all the packets in the ServiceCallback. i > made it > apply to all keyboards and mouses by installing the two drivers at class > level > in the registry. > > so now i am looking to do the same for usb sticks. all i really need is > for > the usb mini filter driver to prevent reading/writing/copying/pasting. > so > again this must be applied to all usb sticks, at the class level. there > are a > few usb samples out there, usbsamp, osrusbfx2, toaster - which is the > best > starting point for me to do this ? > > > __________ Information from ESET Smart Security, version of virus > signature > database 5134 (20100521) __________ > > The message was checked by ESET Smart Security. > > http://www.eset.com >
From: unclepauly on 21 May 2010 09:06 by this i think you mean setting the USBSTOR reg key to 4, thereby disabling usbstor.sys ? this is fine for installed usb sticks, but as soon as you insert a new one (ie one that requires installing) it gets set back to 4... "Maxim S. Shatskih" wrote: > Just disable the USBSTOR service. > > -- > Maxim S. Shatskih > Windows DDK MVP > maxim(a)storagecraft.com > http://www.storagecraft.com > > "unclepauly" <unclepauly(a)discussions.microsoft.com> wrote in message news:8B0E7F2E-EF5F-4B43-AE2F-90D46B4D6296(a)microsoft.com... > > hello, > > > > our software goes in schools and some teachers have requested that they be > > able to enable/disable usb sticks. this is becasue the kids keep bringing in > > locked down exes such as firefox on usb stick. > > > > i have already written a mini filter driver for keyboard and mouse using the > > samples in the WDK (7600). i just needed these devices to be enabled/disabled > > too and i do so by dropping all the packets in the ServiceCallback. i made it > > apply to all keyboards and mouses by installing the two drivers at class > > level in the registry. > > > > so now i am looking to do the same for usb sticks. all i really need is for > > the usb mini filter driver to prevent reading/writing/copying/pasting. so > > again this must be applied to all usb sticks, at the class level. there are a > > few usb samples out there, usbsamp, osrusbfx2, toaster - which is the best > > starting point for me to do this ? > . >
From: unclepauly on 24 May 2010 09:02
i hope people are still watching this thread.... Doran - i am trying to do what you said above by using the diskperf sample to get me started. i have built the diskperf.sys file using an xp checked environment and copied the .sys file to system32/drivers. then i created the service in the registry: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diskperf] Type : 0x0000001 Start : 0x0000003 ErrorControl : 0x0000001 ImagePath : "system32\drivers\diskperf.sys" Group : "PnP Filter" then i set the UpperFilters of the DiskDrive class (4D36E967-E325-11CE-BFC1-08002BE10318) to be: diskperf PartMgr (PartMgr was already there) after doing a reboot the OS crashes and i have to go into last known working system to get it back. if i try safe mode i see it hanging on diskperf.sys before it crashes. all i have done is build the sample from the WDK - do you know what could be the problem here ? as an aside, if you think the diskperf sample is the wrong way to go please let me know of a better alternative. thank you. |