optical drives and disabling USB ports or preventing write access to USB devices is the most fool proof way to restrict file copying, provided the user cannot connect to the Internet. Otherwise they can simply upload files to a remote server and download it later from their own computers. Another way to prevent file copying is to use anti-file copy software. We will look at both methods.
1. Preventing file copying by disabling access to optical drives and USB ports
Windows does not provide an easy way to disable access to optical drives. The only way to do it is disabling them in the BIOS and then locking the BIOS with a password. Of course you wouldn’t be able to access them either, so it isn’t the most smartest thing to do. The alternative approach is to use an optical drive locker such as the CD/DVD Drive Locker. It lets you disable selected optical drives so that they become unresponsive to the open/close button. CD/DVD Drive Locker is actually intended to prevent kids from playing with the drive tray and provides very feeble protection as it can be easily overridden.
USB ports can be disabled quite easily using the registry editor. There are two kinds of restrictions you can put on a USB port – a) disable write privileges to USB port or b) completely disable USB ports
A. Disabling write access to USB ports: Open Windows registry editor and navigate to the following key
Create a new DWORD, name it WriteProtect and put the value as 0. To allow write access change the value to 1.
B. Disabling access to USB ports: Open Windows registry editor and navigate to the following key
Double click on the entry Start on the right pane and set it’s value to 4 (Hexadecimal). To enable USB ports again change the value back to 3.
2. Preventing file copying using anti-file copy software
There are a few anti-file copy software in the market, most of them are commercial. I managed to find one freeware among the lot - M File Anti-Copy
M File Anti-Copy prevents copying of files by disabling the Windows clipboard. With the clipboard disabled, you cannot copy and paste files not only to removable drives but even within partitions and folders. And because the clipboard is disabled you cannot even copy text. The protection feature can be activated or deactivated only by providing the correct password.
When the application is active you are allowed to copy and move files via the built-in file-copier. The software also protects against file deletion and renaming, but this is in a separate section and you have to apply this setting to individual files and folders, which isn’t very helpful.
The program however suffers from a serious flaw – it can’t prevent copying using drag and drop. This is because M File Anti-Copy prevents file copy by disabling the clipboard. Since drag and drop does not use the clipboard, the program fails. You can still use it and just hope the users don’t discover the loophole.
M File Anti-Copy also provides some additional protection like disabling the Task Manager and regedit.
Prevent file copying is never fool proof, there always be some workaround. The best kind of protection will be to disable all removable drives through either the BIOS or the registry editor, and disconnect the computer from the network to prevent file transfer. Or simply deny physical access to the computer when you are not around.