Deny Write Access To Removable Disks

Within a centralized computing solution, data is not stored on the user’s localdevices but is stored centrally on the remote host or storage server, whichfacilitates the protection and control of information security, especially fororganizations that are sensitive and demanding in data security. In addition to theexecution of certain internet control policies to prevent date leak, organizationsalso need to limit write access to removable storage devices to prevent employeesfrom copying confidential data to storage devices such as USB flash drives andportable hard drives.

Configuration Steps：

1. Log in with an administrator account, press “Window” + “R”to launchthe“Run”window and enter “gpedit.msc” to open the local group policyeditor.

2. Find：Computer Configurations-> Administrative Templates-> System.

3. Click“Removable Storage Access”, and “Removable Disks: Deny writeaccess”in the right panel.

4. In the pop-up window, select “Enabled”, and then click “OK”to apply thesetting.

5. After setting, users can read files in removable disks or copy to the host, butcannot write back to the removable disks.

Note: This policy is also applicable to administrators. After setting, administratorswill also be restricted from writing to removable disks.