How do I change the access rights of a removable disk?

[graze1004]

I want to change the device access right using the SetupDiSetDeviceRegistryProperty () API.

I set the following permissions using the SPDRP_SECURITY_SDS property.

- Everyone group: Block READ
- Administrator group: Allow READ

And the set security SDS is as follows.

DD;;KR;;;WD)(A;;KR;;;BA)

And I restarted the device with DICS_DISABLE, DICS_ENABLE by setting DIF_PROPERTYCHANGE as a parameter of SetupDiCallClassInstaller() API.

However, it is still possible to create files on USB from the administrator account.

Is my SDS incorrect?
How do I change the device's read or write permission?

Continue reading...