I'm trying to achieve this point:

  • Disable Read Access to Removable Devices from Registry / GPO
  • Enable Write Access to Removable Devices from Registry / GPO

What I've tried so far:

  • From gpedit.msc enter image description here

Then : gpupdate /force from cmd shell

The Problem:

  • Now trying to paste a test file on the Removable drive to test if write access is granted, and the problem is described in the following animation

enter image description here

Question: How to achieve this goal? enable write access and disable read access to removable devices on Windows clients via any available method.

  • Are you on a domain/using an active directory? – NiallUK Jul 17 '19 at 15:22
  • @NiallJones Yes! domain with AD, currently testing offline – M. Abdelhafid Jul 17 '19 at 15:23
  • You can't write without read access as writing requires reading the file system. – DavidPostill Jul 17 '19 at 16:10
  • Your question might benefit from explaining why you want to achieve this seemingly-strange combination of 'write-but-no-read' permissions :) – bertieb Jul 17 '19 at 16:17
  • 1
    From this page it looks like it's not possible, because write needs read as DavidPostill pointed out – Moshe Gross Jul 17 '19 at 18:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.