JPS Posted March 1, 2011 Posted March 1, 2011 Apologies if this is the wrong forum. Situation is: I have some USB sticks that teachers will use and they are encrypted using TrueCrypt. TrueCrypt is installed on the stick and there is an autorun.inf file as well, so that when they connect it to a PC it prompts them to run the app and then enter the password to mount the device. Problem is: If for some reason the autorun does not work, is there an easy way to execute it manually? Obviously the member of staff could open the TrueCrypt folder and then run the executable and then select mount device, but I am really trying to avoid them having to do so. Any help will be greatly received.
LeMarchand Posted March 1, 2011 Posted March 1, 2011 Had the same thoughts. My solution (and a discussion worth reading through) is here. 1
JPS Posted March 1, 2011 Author Posted March 1, 2011 Thanks @LeMarchand so far. Am I right in thinking then, I just need a copy of that batch file (hint hint) therefore providing the teacher with one shortcut to use in case of autorun failure?
fawkers Posted March 1, 2011 Posted March 1, 2011 There is also the small issue that MS have now disabled auto run for all plugin devices in a recent update.
JPS Posted March 1, 2011 Author Posted March 1, 2011 There is also the small issue that MS have now disabled auto run for all plugin devices in a recent update. If thats the case it sounds like i'm a bit screwed. Is there any kind of work around for this? Do we know why they have implemented this?
fawkers Posted March 1, 2011 Posted March 1, 2011 its to stop the spread of virus via autorun.inf i think you can change the behavior in the registry i'll try and fond the KB for you. 1
LeMarchand Posted March 1, 2011 Posted March 1, 2011 Thanks @LeMarchand so far. Am I right in thinking then, I just need a copy of that batch file (hint hint) therefore providing the teacher with one shortcut to use in case of autorun failure? I'm looking, but it looks as if I stupidly didn't save the batch file before converting it to an exe. If thats the case it sounds like i'm a bit screwed. Is there any kind of work around for this? Do we know why they have implemented this? What fawkers said; another workaround would be the shortcut method suggested. 1
JPS Posted March 1, 2011 Author Posted March 1, 2011 I think I have fixed it. I have placed a shortcut in the root with the following target: E:\TrueCrypt\TrueCrypt.exe /q background /e /m rm /v "Secure" and a Start In of just E:\ So I should just be able to advise staff to double click that if they dont get autorun. I've also hidden all the contents except of course this shortcut. Would you guys agree I haven't made any oversights?
JPS Posted March 1, 2011 Author Posted March 1, 2011 oh shoot, i got excited too early. Just tested it on a teacher account and realised because it needs to run a driver for TrueCrypt to work, the account needs admin privileges, which of course they dont have. Any suggestions, other than granting them admin access? Is there a file from the TrueCrypt folder that I can roll out to all PCs, therefore negating the need for admin rights?
JPS Posted March 1, 2011 Author Posted March 1, 2011 look at USBDLM .. Do you think it is just a drive letter issue then?
JPS Posted March 1, 2011 Author Posted March 1, 2011 I've installed USBDLM on the test laptop and have been able to assign default drive letters to usb devices but this hasn't helped the situation. The error message is talking about a TrueCrypt device driver, which presumably has to be installed, but can't be due to restrictions. My next thought was to install TrueCrypt on to the laptop. It may solve the issue but then will be a pain to install it on all school machines.
JPS Posted March 1, 2011 Author Posted March 1, 2011 Right, once installed on the machine it now works (surprise that really, given the drivers required are all in place) so now just a case of rolling out an MSI which I think I have found from another thread. Its a .7z file which I havent seen before but I guess thats what I need.
superfletch Posted March 1, 2011 Posted March 1, 2011 .7z will be a 7zip file so you'll probably need to uncompress it and go from there. 1
JPS Posted March 1, 2011 Author Posted March 1, 2011 Well I have learnt an awful lot this afternoon! Now established the MSI I have obtained is for v6.3, which of course wont work with my version 7 of TrueCrypt. So now I am hoping to build my own MSI using AdvancedInstaller which I have never used before (downloading now). Fingers crossed this will be the last hurdle.
fawkers Posted March 1, 2011 Posted March 1, 2011 Just to finish up my post the KB was kb967715, the update from MS is optional so make sure your sure before applying it
fawkers Posted March 7, 2011 Posted March 7, 2011 just as an update from WinInfo Short Takes: March 5, 2011 As part of this week's regularly scheduled security patch update cycle, Microsoft reissued the patch as a high priority automatic update.
mac_shinobi Posted March 7, 2011 Posted March 7, 2011 USBDLM as per the help article online AutoRuns on user logon / user switch Configured AutoRun events are executed by default on arrival of a drive or on insertion of a media only. If USBDLM shall do this on user logon or user switch: [settings] AutoRunOnLogon=1 With an auto logon the USBDLM service may not be started yet on logon, so it misses the logon event. Workaround: When there are fewer than two minutes since the system is started and the a user is already logged on when the USBDLM services starts, then the AutoRuns are executed too. Windows 2000 does not support the required notification messages, so USBDLM cannot AutoRun on logon. Scroll down to - Settings Section USBDLM Help
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now