The following registry have been change for the USB port read only for USB thumb drive

 

Reference:
http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2.htm
http://www.howtogeek.com/howto/windows-vista/registry-hack-to-disable-writing-to-usb-drives/
http://diaryproducts.net/about/operating_systems/windows/disable_usb_sticks
http://support.microsoft.com/kb/823732
http://www.petri.co.il/disable_writing_to_usb_disks_in_xp_sp2_with_gpo.htm

The following registry have been change for the USB port read only for USB thumb drive

Disable USB Removable Mass Storage Device and Disable Writing to USB Drives

Disable USB Removable Mass Storage Device Drive Access in Windows

http://www.mydigitallife.info/2008/06/26/disable-usb-removable-mass-storage-device-drive-access-in-windows/

 

Registry Hack to Disable Writing to USB Drives

http://www.howtogeek.com/howto/windows-vista/registry-hack-to-disable-writing-to-usb-drives/

Disable USB Removable Mass Storage Device and Disable Writing to USB Drives

Freeware to lock or unlock your USB ports

USB Port Locked

http://www.softpedia.com/get/Security/Lockdown/USB-Port-Locked.shtml

Freeware to lock or unlock your USB ports

Control the USB port power in Windows

For Control the USB port power in Windows (e.g. Power off and Power on again – not able to keep in off states, it only allow power off and power on again)

 

USB Power Reset v.1.0

http://www.torry.net/authorsmore.php?id=7136

 

http://www.torry.net/apps/hardware/other/UsbReset32.zip

Control the USB port power in Windows

USB port management

The following two tools to find out the port device ID and re-enable the disconnected usb without re-plug (Eject and re-detect a usb drive without unplugging it):

 

        Devcon

http://support.microsoft.com/kb/311272

 

D:\Browser_Download\devcon\i386>devcon remove USB\VID_0204*

USB\VID_0204&PID_6025\28202200913F2A12                      : Removed

1 device(s) removed.

 

D:\Browser_Download\devcon\i386>devcon rescan

Scanning for new hardware.

Scanning completed.

USBView is a free utility from Microsoft  that displays the USB connection tree and shows the USB devices that are connected to it together with their configuration data.  This is very useful for debugging USB enumeration errors.  USBView runs under Windows 98, ME, 2000 and XP.

http://www.ftdichip.com/Resources/Utilities.htm

 

 

 

Reference:

Tracing USB Device artefacts on Windows XP operating system for forensic purpose

http://scissec.scis.ecu.edu.au/proceedings/2007/forensics/23_Luo_Tracing_USB_Device_artefacts_on_Windows_XP.pdf

http://www.drdobbs.com/189401600;jsessionid=NHRU0VACUYV4VQE1GHPSKH4ATMY32JVN?pgno=1

USB port management