there is an copy protect feauture built into your Windows OS
it's always pre-installed with almost every version of Windows 7/8.x/10
Best method so far is that with Group Policy settings
To enable USB write protection using Group Policy, do the following:
1. Use the
Windows key + R keyboard shortcut to open the
Run command.
2. Type
gpedit.msc and click
OK to open the Local Group Policy Editor.
3. Browse the following path:
Computer Configuration > Administrative Templates > System > Removable Storage Access
4. On the right side, double-click the
Removable Disks: Deny write access policy.
Local Group Policy Editor
Double click on:
- Removable Disks: Deny execute access
-
- Removable Disks: Deny read access
-
- Removable Disks: Deny write access
Optional - you can leave some of the rights intact, for example deny only copying to USD drive, or deny only execute from USD drive. By denying execute, read and write access we are tighetning security to the maximum regarding USD devices.
5. Select the
Enabled option to activate the policy.
6. Click A
pply.
7. Click
OK.
8. Close the Group Policy editor.
9. Restart your computer to complete the task.
Next time you (or someone) will try to insert USD device,
Access is Denied message will appear:
USB - Access is Denied
If you need to revert the changes, just follow the same steps, but on step 5 make sure to select the Not Configured option.