VBScript Drive Lock

Update: This program now has the ability to hide the specified locked drives.

After making my screen lock which locks the users computer I decided to take the challenge of making a drive lock that locks a drive.

We all sometimes want to keep users out of a drive (especially a usb drive). So this program will lock the drive to prevent unauthorized users from gaining access to it.

Unlike my screen lock this script is pretty complicated. Mainly because I added so many if's and then's just to give to program a professional feel.

This program was made in VBScript.
In the next few steps I'll show you how I made it.

You can download my Drive Lock below:

Here is the raw VBScript file LINK. You will have to remove one of the 's' at the end so it is 'DriveLock.vbs' or what ever you want as long as it ends in .vbs.

Here I will show you the first part of the drive lock...The first pic is what comes up when you first run the program.

I made it so you have three options here, to lock a drive, to unlock drive(s) or exit.

Now here is how I did it:

Function DisplayPrompt()
    intSplash = MsgBox("What would you like to do?" & vbCrLf & vbCrLf  _
    & "[Click on YES to lock a drive] " & vbCrLf _
     & "[Click on NO to unlock drive(s)]",35, cTitleBarMsg)
    If intSplash = 2 Then
        DisplaySplashScreen()
    ElseIf intSplash = 7 Then
        On Error Resume Next
        objWshShl.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewOnDrive"
        objWshShl.RegDelete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives"
        If Err.Number <> 0 Then
            MsgBox "Drives are already unlocked.",16,cTitleBarMsg
            DisplayPrompt()
        End If
        On Error Goto 0
        objWshShl.Run "Taskkill /f /im explorer.exe",0
        WScript.Sleep 300
        objWshShl.Run "cmd /c explorer.exe",0
        MsgBox "Drive unlocked was succesfull!",64,cTitleBarMsg
        DisplayPrompt()
    End If
End Function

If you click NO to unlock the drive(s), it deletes the registry keys that contains the settings that locks/hides the drive it also checks to see if the drive is already unlocked. Then it restarts explorer.exe so that the changes take effect immediately.

If you click cancel, it displays the splash screen and then exits.

Finally if you click YES then it goes to the next menu. Which I will explain in the next step.

Next I will show you the menu were you choose witch drive you want to lock (pic 1).

Set colDrives = objFSO.Drives
For Each objDrive in colDrives
    strDriveList = strDriveList & objDrive.DriveLetter & Space(10)
Next
strDrives = LCase(Replace(strDriveList," ","",1,-1))
Set colDrives = objFSO.Drives
strDriveList = ""
For Each objDrive in colDrives
    strDriveList = strDriveList & objDrive.DriveLetter & ":\" & Space(5)
Next

InputMenu()
Sub InputMenu
    strChoice = InputBox("Enter letter of the drive you wish to lock." & _
     " Or type ALL to lock all drives." & _
       vbcrlf & vbcrlf & "Available drives" & Space(3) & _
         ":" & vbCrLf & vbCrLf & strDriveList, cTitleBarMsg)

The first bit of code generates a list of all the available drives. The next part is the inputbox were you enter the letter of the drive that you would like to lock.

If you try typing in anything but a valid drive letter, and the program will refuse it. Here is how I did that:

If IsEmpty(strChoice) Then
	DisplaySplashScreen()
    ElseIf strChoice = "" Then
        MsgBox "Do not leave this blank.",16, cTitleBarMsg
        InputMenu()
    ElseIf LCase(strChoice) = "all" Then
        'Do Nothing
    ElseIf Len(strChoice) <> 1 Then 
        MsgBox "You must enter the letter ONLY.",16, cTitleBarMsg
        InputMenu()
    ElseIf Not InStr(1,strDrives,LCase(strChoice),1) <> 0 Then 
        MsgBox "Invalid choice, please try again.",16, cTitleBarMsg
        InputMenu()
    End If

The first two lines check to see if the user hit the cancel button, and if they did the program exits.

The next three lines checks to see if the user left the input area blank.

The rest of the code is pretty confusing, but it is basically just making sure that the user typed in a valid drive.

For some reason the registry cannot read the drive letter alone, so it must be put into a corresponding integer. That is what this code below is doing. For more information on this click here.

 ElseIf strChoice = "a" Then
     intDriveNumber = 1
 ElseIf strChoice = "b" Then
     intDriveNumber = 2
 ElseIf strChoice = "c" Then
     intDriveNumber = 4

Once the integer is configured the script can now write to the registry using this code:

Another note, is that this program writes to HKLM instead of HKCU. HKLM affects all users instead of just the current logged on user so that the lock is more effective.

objWshShl.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewOnDrive", intDriveNumber, "REG_DWORD"
objWshShl.RegWrite "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives", intDriveNumber, "REG_DWORD"

I hope you found this instructable helpful.
if you don't understand a part of this, please post a comment or pm me.

And please give me feedback on any problems and please rate. I spent a lot of time on this.

If you want to download the raw vbs file, just make sure it is saved with a .vbs file extension. Another nice thing about it, is that it is portable so you can run it off a flash drive and you don't need to install anything.