Securing USB disk traveling between a workgroup and domain?

[DHR]

Bit of an interesting permissions based one for you, I think I know the answer but someone else may have a better solution for me!

I have a USB drive I store my flac files on, that I have painfully ripped disc by disc, the files are ripped on a Windows 8.1 workgroup. The drive is then transported to work and used from work.

I'm not one for trusting people that think flacs should be free for anyone and knowing someone would one day take the drive and either a) try to use it for something else or b) pull all of the files off I decided it would be prudent to use bitlocker on the drive.

There is one flaw though, as soon as I unlock the drive people are able to browse to the drive via \\machinename\x$ again, a problem!

So I figured remove everyone and authenticated users from the NTFS permissions and add only my domain account to the main folder on the drive. This appeared to work, but presents me with another issue... when the drive travels back to the workgroup I have to manually add in permissions to all files for the account that access the drive on the workgroup and even then any directory I've created on the drive whilst attached to the domain is completely locked out on the workgroup.

So the question is, is there a better way?

 

[BattFink]

Do you have any form of administrative control over your work PC? (sounds like it is the case as you'd need admin rights to browse an administrative share)

If so I'd be tempted to either disable the administrative shares on your PC or a quick & dirty way of doing this would be to remove domain user & administrators from the administrators & users local group (and just having your user ID in the local user & administrator groups)

Worst case stop the Server service on the workstation