如何隐藏 nandflash

我在nandflash中放了很多应用程序,用户用activesync可以看到nandflash里的内容,可以往SD卡拷文件,我不想用户损坏nandflash里的文件,所以想隐藏起来,但是在地址栏里输入\\nandflash又能操作里面的内容.

我把MountFlags都设成了隐藏,值为"MountFlags"=dword:11可是还是能看到Nandflash文件夹,
请问大家是如何解决的.

[HKEY_LOCAL_MACHINE\System\StorageManager\BINFS]
        "Folder"="BINFS"
        "FriendlyName"="Bin FileSystem"
        "Dll"="binfs.dll"
        "BootPhase"=dword:1      ;diffnx 0
        ;"MountFlags"=dword:11     ;diffnx no line
  ; MountFlags:
  ; 0x10 specifies that this file system is to be mounted as an external
  ;      ROM filesystem shadowing the \windows directory
  ; 0x1 specifies that the mountpoint \BINFS is to be hidden
  
[HKEY_LOCAL_MACHINE\System\StorageManager\AutoLoad\FlashDrv]
    "DriverPath"="Drivers\\BuiltIn\\FlashDrv" ;diffnx BlockDevice
    "LoadFlags"=dword:1
    "MountFlags"=dword:11      ;diffnx 11-2
    "BootPhase"=dword:1       ;diffnx 0
 
[HKEY_LOCAL_MACHINE\Drivers\BuiltIn\FlashDrv] ;diffnx BlockDevice
    "Prefix"="DSK"
    "Dll"="FLASHDRV.dll"
    "Order"=dword:0
    "Ioctl"=dword:4
    "Profile"="FlashDrv"
    "FriendlyName"="MS Flash Driver"
    "MountFlags"=dword:11      ;diffnx no line
    "BootPhase"=dword:1       ;diffnx 0
    "Flags"=dword:1000       ;"Flags"=1000 or with any existing settings.
 
; Bind BINFS to the block driver
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\FlashDrv]
       "DefaultFileSystem"="BINFS"
    "PartitionDriver"="mspart.dll"
    "AutoMount"=dword:1
    "AutoPart"=dword:1
    "AutoFormat"=dword:1

  ;  "MountFlags"=dword:2
  
   "Folder"="NandFlash"
   "Name"="Microsoft Flash Disk"
   "MountHidden"=dword:00000001
   "BootPhase"=dword:00000002
   "Flags"=dword:1000    
 
[HKEY_LOCAL_MACHINE\System\StorageManager\Profiles\FlashDrv\BINFS]  ;diffnx FATFS
    "MountFlags"=dword:2      ;diffnx 0
 

;---------------------------------------------------------------------
[HKEY_LOCAL_MACHINE\init\BootVars]
   "SYSTEMHIVE"="\\System.hv"    ;diffnx system.hv
   "PROFILEDIR"="NandFlash"
   "Start DevMgr"=dword:1    ;diffnx 0

可否尝试下不自动挂载,而是手动挂载,这样用户就不能轻易的访问到nandflash了