Policy

Removable Disks: Deny write access

This policy setting denies write access to removable disks. If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class. Note: To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."

Policy
Pack Microsoft Windows
Category System / Removable Storage Access
Policy ID 710a96a197be
Internal name RemovableDisks_DenyWrite_Access_2

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Deny_Write (enabled) = 1
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Deny_Write (disabled) = 0

Policy notes

This policy setting denies write access to removable disks. If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class. Note: To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."

Related policies

All Removable Storage classes: Deny all accessAll Removable Storage: Allow direct access in remote sessionsCD and DVD: Deny execute accessCD and DVD: Deny read accessCD and DVD: Deny write accessCustom Classes: Deny read accessCustom Classes: Deny write access