Policy
All Removable Storage classes: Deny all access
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista
Configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class. If you enable this policy setting, no access is allowed to any removable storage class. If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Deny_All | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- UserAll Removable Storage classes: Deny all accessAt least Windows Vista
- ComputerAll Removable Storage: Allow direct access in remote sessionsAt least Windows Vista
- ComputerCD and DVD: Deny execute accessAt least Windows Server 2008 R2 or Windows 7
- ComputerCD and DVD: Deny read accessAt least Windows Vista
- UserCD and DVD: Deny read accessAt least Windows Vista
- UserCD and DVD: Deny write accessAt least Windows Vista
- ComputerCD and DVD: Deny write accessAt least Windows Vista
- ComputerCustom Classes: Deny read accessAt least Windows Vista
- UserCustom Classes: Deny read accessAt least Windows Vista
- UserCustom Classes: Deny write accessAt least Windows Vista
- ComputerCustom Classes: Deny write accessAt least Windows Vista
- ComputerFloppy Drives: Deny execute accessAt least Windows Server 2008 R2 or Windows 7