'Removable Disks: Deny write access' for Computer ConfigurationID: oval:org.secpod.oval:def:57027 | Date: (C)2019-07-06 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
This policy setting denies write access to removable disks.
If you enable this policy setting, write access will be denied to this removable storage class.
If you disable or do not configure this policy setting, write access will be allowed to this removable storage class.
NOTE: To require that users write data to BitLocker-protected storage enable the policy setting Deny write access to drives not protected by BitLocker located in Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\Removable Storage Access!Removable Disks: Deny write access
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
Platform: |
Microsoft Windows Server 2019 |