Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\StorageDevicePolicies] "WriteProtect"=dword:00000001To restore mounting removable disks as read-write, just change "00000001" to "00000000", resave the file, and double click to merge. Not as sound as a hardware write blocker like the Forensic UltraDock, but might come in handy for less sensitive work.
UPDATE: Just stumbled onto SAFE Block, "a software-based write-blocker that facilitates the quick and safe acquisition and/or analysis of any disk or flash storage media attached directly to your Windows workstation. It is proven to be safe, significantly faster than hardware write-blocking solutions, and used across the globe by agencies, law enforcement, and private firms". Retails for $219 to $549, depending on Windows version. The licensing scheme is "single-instance use . . . machined-tied to one computer".
/windows | Feb 17, 2015
Subscribe or visit the archives