Policy
Prevent removable media source for any installation
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP
This policy setting prevents users from installing any programs from removable media. If you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found. This policy setting applies even when the installation is running in the user's security context. If you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs. Also, see the "Enable user to use media source while elevated" and "Hide the 'Add a program from CD-ROM or floppy disk' option" policy settings.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKCU\Software\Policies\Microsoft\Windows\Installer\DisableMedia | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow user control over installsAt least Windows 2000
- ComputerAllow users to browse for source while elevatedAt least Windows 2000
- ComputerAllow users to patch elevated productsAt least Windows 2000
- ComputerAllow users to use media source while elevatedAt least Windows 2000
- UserAlways install with elevated privilegesAt least Windows 2000
- ComputerAlways install with elevated privilegesAt least Windows 2000
- ComputerControl maximum size of baseline file cacheWindows Installer v3.0
- ComputerEnforce upgrade component rulesWindows Installer v3.0
- ComputerPrevent embedded UIWindows Installer v4.5
- ComputerPrevent Internet Explorer security prompt for Windows Installer scriptsAt least Windows 2000
- ComputerPrevent users from using Windows Installer to install updates and upgradesAt least Windows 2000
- ComputerProhibit flyweight patchingWindows Installer v3.0