The Deny write access to fixed drives not protected by BitLocker machine setting should be configured correctly.
This policy setting determines whether BitLocker protection is required for fixed data drives to be writable on a computer. This policy setting is applied when you turn on BitLocker. If you enable this policy setting, all fixed data drives that are not BitLocker-protected will be mount ...