Removable Disks: Deny write access

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista

This policy setting denies write access to removable disks. If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class. Note: To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."

This policy has no additional user input fields.

• User
  All Removable Storage classes: Deny all access

  At least Windows Vista
• Computer
  All Removable Storage classes: Deny all access

  At least Windows Vista
• Computer
  All Removable Storage: Allow direct access in remote sessions

  At least Windows Vista
• Computer
  CD and DVD: Deny execute access

  At least Windows Server 2008 R2 or Windows 7
• Computer
  CD and DVD: Deny read access

  At least Windows Vista
• User
  CD and DVD: Deny read access

  At least Windows Vista
• User
  CD and DVD: Deny write access

  At least Windows Vista
• Computer
  CD and DVD: Deny write access

  At least Windows Vista
• Computer
  Custom Classes: Deny read access

  At least Windows Vista
• User
  Custom Classes: Deny read access

  At least Windows Vista
• User
  Custom Classes: Deny write access

  At least Windows Vista
• Computer
  Custom Classes: Deny write access

  At least Windows Vista