Help me get my data on blocked usb write access system in my office

nRiTeCh

nRiTeCh

Level N
Hi, in recent IT audit, writing to usb has been blocked on everybodys system in my office.:mad: which occurred suddenly and my data is stuck on my system.
We get following error while copying anything to our pendrives/external storages.
bomb.gif

destinationfolderaccessms9.jpg

I tried all sort of usb registry hacks but to no vail. I somehow managed to enable create new folder etc. menu options to the right click menu inside usb drives but still it doesnt allow to create any files nor copying anything to it :bomb::mad:

I even created a local admin user and then removed the ethernet/lan cable and logged in but still same :( In gpedit everything seems ok.

Please help me unblocking access to the usb drives to get my data. I wont mind if they block it permanently after I get my data. All tweaks n hacks are welcome.
 
Best option is to befriend a guy from the local IT team, and use his help.

- From a legal standpoint breaking this policy could throw you out of your job
- Technically, this should be able to help you, if you haven't tried already. Registry Hack to Disable Writing to USB Drives - How-To Geek

Also check what protection is working on your system. If it's something like Pointsec, then it will be very difficult to bypass.
 
distro said:
How abt talking to ur boss or the company's IT guy ? If it's genuine issue, they will not mind helping u out.
Click to expand...

It is centrally implement as even my bosses system have blocked the usb. And nobody cares what data and how much imp. is it for you, its blocked means its blocked!! No excuses.

ayanavish said:
Best option is to befriend a guy from the local IT team, and use his help.

- From a legal standpoint breaking this policy could throw you out of your job
- Technically, this should be able to help you, if you haven't tried already. Registry Hack to Disable Writing to USB Drives - How-To Geek

Also check what protection is working on your system. If it's something like Pointsec, then it will be very difficult to bypass.
Click to expand...

I have already tried that hack but to no use. How to check for pointsec? Where to look it for?
Also I have something like this in my device manager...|Security devices--sd.JPG
 
^ Pointsec will have an icon like this residing on the tray
505380.png


Scanning the program files section might give you some insights. My best guess is, the protection is taking place at two places 1) registry, where USB write has been disabled 2) at a monitoring software level, where the software is giving limited rights to certain USB devices. So, the software is loading with the OS, and running as a process.
 
No such icon hence ruling out pointsec...
I too feel theres some service which is refraining the write access. As I already have tweaked all usb settings in registry. And i did found such services but unable to stop them or disable them as it says access denied. Any way to use usb from safe mode where such services wont work?
 
Borrow a router and a network access device like the pogoplug/go flex. A friend had plans to use this for a similar usage but did not go ahead and instead went for backing to cloud.
 
Can you post a screenshot of your system tray, Security Devices, TPIM, that is something else that you need not worry about, you really need to befriend someone from your office helpdesk!
 
theoracle said:
Make the USB drive bootable by installing some version of Linux. Boot your system via this bootable usb drive and copy the files.
Click to expand...

Its not a direct solution as booting to linux will be seen by neighboring colleagues who may in turn raise fingers on me...jealousy.... Still, will it read ntfs drives and data beneath?
 
nRiTeCh said:
Hi, in recent IT audit, writing to usb has been blocked on everybodys system in my office.:mad: which occurred suddenly and my data is stuck on my system.
We get following error while copying anything to our pendrives/external storages.
bomb.gif

View attachment 18165

I tried all sort of usb registry hacks but to no vail. I somehow managed to enable create new folder etc. menu options to the right click menu inside usb drives but still it doesnt allow to create any files nor copying anything to it :bomb::mad:

I even created a local admin user and then removed the ethernet/lan cable and logged in but still same :( In gpedit everything seems ok.

Please help me unblocking access to the usb drives to get my data. I wont mind if they block it permanently after I get my data. All tweaks n hacks are welcome.
Click to expand...

So you are asking for help on hacking your office systems ? I would be wary of offering any help, other then "talk to your boss"
 
theoracle said:
Yes most of them are able to read ntfs. I remember ubuntu and debian distro was having this facility.
Click to expand...
He is right. I do it all the time. Just be sure to remove the LAN cable before plugging in the usb and then reboot.
P.S: the method is illegal and anything you do will be your personal responsibility.
P.P.S: if your IT is smart enough, they would have installed hard disk encryption with mcafee endpoint protection in which case it wont work
 
your dvd rom is unrecognized too if you look closely. seems all external media in disabled through device management. this policy is enabled using administrative templates and is hard to bypass if you use lan to login to your user account. the admins must have gone a step further and denied uer access to everyone including local admins. probably the only people who have write access to usb disk or drives will be a select few in IT group themselves.
 
Back
Top