Protect Files Distributed on USB Drives
Package supported documents and media for offline delivery, then set access and use permissions for recipients. This page covers content protection, not blocking USB devices or making a package file impossible to copy.
Quick answer
GiliSoft Copy Protect protects supported content inside a delivery package, not the .GCP file from being copied in File Explorer. Device binding controls whether recipients can open the content on authorized hardware. Reader permissions can restrict actions such as copying, printing, or exporting after it opens. Use USB Lock when the goal is to control USB devices connected to a Windows PC.
What does USB binding protect?
USB binding is an opening requirement for the protected content. It is not a Windows file-copy restriction. Copying the .GCP package duplicates the protected package; it does not by itself remove its access settings or extract the files inside.
| Action | What it means |
|---|---|
| Copy the .GCP file in File Explorer | This duplicates the protected container file. It does not by itself extract or unlock the content inside. |
| Open a copied .GCP file without the bound USB | The protected content should remain inaccessible if USB binding was configured for that package. |
| Open a copied .GCP file while the bound USB is connected | Depending on the binding setup, the USB may authorize opening even when the package copy is stored elsewhere. Test this case with the actual recipient workflow. |
| Copy or export content from inside the GCP Reader | Separate Reader permissions control these actions. This is the content-level copy protection, distinct from duplicating the .GCP file. |
If a package opens while the bound USB is disconnected, verify that USB binding was selected for the final export, that the intended drive was selected, and that you are testing the recipient/client access rather than the publisher's admin workflow. Recreate the package after changing its binding settings, then test the newly exported file. Contact GiliSoft support if the unbound copy still opens.
If your requirement is to keep every file on a lost USB unreadable, consider USB drive encryption. If you need to restrict which USB devices can be used on a Windows PC, see USB Lock.
Choose the correct USB protection product
| Goal | Product | Protection scope |
|---|---|---|
| Control delivered files after handoff | GiliSoft Copy Protect | Protected package and playback permissions |
| Block or allow USB devices on a PC | GiliSoft USB Lock | Endpoint device and port policy |
| Create public and private USB areas | GiliSoft USB Encryption | Password-protected storage on the drive |
| Encrypt an entire internal drive | Full Disk Encryption | Data at rest on a supported PC drive |
Plan controlled USB file delivery
- Identify the supported document, image, audio, or video formats.
- Decide whether recipients may print, copy, capture, or export.
- Choose password, computer, USB-device, or other supported binding.
- Set an expiry only when date and clock behavior have been tested.
- Keep the original source files and recovery information off the delivery drive.
Create and test a protected USB package
-
Add representative source files.
Start with the most complex document or media format recipients need.
-
Choose the delivery package.
Select the supported GCP or EXE workflow for the recipient environment.
-
Configure viewing permissions.
Apply only the copy, print, export, watermark, capture, and edit restrictions required.
-
Set password, binding, or expiry rules.
Document authorized recovery before finalizing the package.
-
Test on a clean recipient PC.
Verify opening, playback, printing, expiry, and binding. Test from the authorized USB, from an unbound USB with the authorized drive disconnected, and from a copied package while the bound drive is connected.
Limits of USB copy protection
No delivery control can guarantee that authorized viewers never reproduce information. Screen photography, manual transcription, compromised recipient computers, and policy violations remain possible. Use proportionate controls, recipient agreements, watermarking, and auditing for valuable content.
Frequently asked questions
If a GCP package is bound to a USB drive, why can the file still be copied?
USB binding is an access check when the package is opened; it does not block Windows from copying the .GCP file. It protects access to the content inside, while Reader permissions can restrict copying or exporting that content after opening. If you need to prevent the package file itself from being copied, Copy Protect alone does not do that.
Is Copy Protect the same as USB Lock?
No. Copy Protect controls packaged content delivered to recipients. USB Lock controls which devices and data-transfer channels may be used on a Windows PC.
Does Copy Protect encrypt the entire USB drive?
No. For a public and password-protected storage layout, evaluate GiliSoft USB Encryption instead.
Can recipients open protected files on another computer?
That depends on the package, password, device binding, licensing, and recipient environment configured by the publisher.
Should I test the package before distribution?
Yes. Test the final USB media on a clean recipient PC with every required format and permission.