'Removable Disks: Deny write access' for User ConfigurationID: oval:org.secpod.oval:def:27811 | Date: (C)2015-10-08 (M)2022-10-10 |
Class: COMPLIANCE | Family: windows |
This policy setting denies write access to removable disks.
If you enable this policy setting, write access is denied to this removable storage class.
If you disable or do not configure this policy setting, write access is allowed to this removable storage class.
Note: To require that users write data to BitLocker-protected storage, enable the policy setting Deny write access to drives not protected by BitLocker, which is located in Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives.
Fix:
(1) GPO: User Configuration\Administrative Templates\System\Removable Storage Access!Removable Disks: Deny write access
(2) REG: HKEY_USERS\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
Platform: |
Microsoft Windows Server 2012 R2 |