Windows 10: Deny Write Access to Fixed Data Drives not Protected by BitLocker

Discus and support Deny Write Access to Fixed Data Drives not Protected by BitLocker in Windows 10 Tutorials to solve the problem; How to: Deny Write Access to Fixed Data Drives not Protected by BitLocker Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker... Discussion in 'Windows 10 Tutorials' started by Brink, May 6, 2018.

  1. Brink Win User

    Deny Write Access to Fixed Data Drives not Protected by BitLocker


    How to: Deny Write Access to Fixed Data Drives not Protected by BitLocker

    Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker in Windows


    You can use BitLocker Drive Encryption to help protect your files on an entire drive. BitLocker can help block hackers from accessing the system files they rely on to discover your password, or from accessing your drive by physically removing it from your PC and installing it in a different one. You can still sign in to Windows and use your files as you normally would.

    If you like, you can set a policy that configures whether BitLocker protection is required for a computer to be able to write data to fixed data drives. All fixed data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access.

    This tutorial will show you how to allow or deny write access to fixed data drives not protected by BitLocker for all users in Windows 7, Windows 8, and Windows 10.

    *Warning You must be signed in as an administrator to allow or deny write access to fixed data drives not protected by BitLocker.

    *note For Windows 7, BitLocker Drive Encryption is only available in the Windows 7 Professional and Windows 7 Enterprise editions.

    For Windows 8/8.1, BitLocker Drive Encryption is only available in the Windows 8 Pro and Windows 8 Enterprise editions.

    For Windows 10, editions.



    CONTENTS:
    • Option One: Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker in Local Group Policy Editor
    • Option Two: Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker using a REG file

    EXAMPLE: Deny write access to fixed data drives not protected by BitLocker

    Deny Write Access to Fixed Data Drives not Protected by BitLocker [​IMG]







    OPTION ONE [/i] Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker in Local Group Policy Editor
    1. Open the Local Group Policy Editor.

    2. Navigate to the policy location below in the left pane of Local Group Policy Editor. (see screenshot below)
    *Arrow Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives


    Deny Write Access to Fixed Data Drives not Protected by BitLocker [​IMG]

    3. In the right pane of Fixed Data Drives in Local Group Policy Editor, double click/tap on the Deny write access to fixed drives not protected by BitLocker policy to edit it. (see screenshot above)

    4. Do step 5 (allow) or step 6 (deny) below for what you would like to do.


    5. To Allow Write Access to Fixed Data Drives not Protected by BitLocker
    A) Select (dot) Not Configured or Disabled, click/tap on OK, and go to step 7 below. (see screenshot below)

    *note Not Configured is the default setting.

    6. To Deny Write Access to Fixed Data Drives not Protected by BitLocker
    A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)


    Deny Write Access to Fixed Data Drives not Protected by BitLocker [​IMG]

    7. Close the Local Group Policy Editor.

    8. Restart the computer to apply.






    OPTION TWO [/i] Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker using a REG file
    *note The downloadable .reg files below will add and modify the DWORD value in the registry key below.

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\Microsoft\FVE

    FDVDenyWriteAccess DWORD

    (delete) = Allow (default)
    1 = Deny



    1. Do step 2 (allow) or step 3 (deny) below for what you would like to do.


    2. To Allow Write Access to Fixed Data Drives not Protected by BitLocker
    *note This is the default setting.
    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Allow_write_access_to_fixed_data_drives_not_protected_by_BitLocker.reg

    Download

    3. To Deny Write Access to Fixed Data Drives not Protected by BitLocker
    A) Click/tap on the Download button below to download the file below, and go to step 4 below.

    Deny_write_access_to_fixed_data_drives_not_protected_by_BitLocker.reg

    Download

    4. Save the .reg file to your desktop.

    5. Double click/tap on the downloaded .reg file to merge it.

    6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

    7. Restart the computer to apply.

    8. You can now delete the downloaded .reg file if you like.

    That's it,
    Shawn


    Related Tutorials

    :)
     
    Brink, May 6, 2018
    #1
  2. RobertJWin, Oct 27, 2019
    #2
  3. Bitlocker making removable media Write Protected

    I work for a company who handles secure data. We use bitlocker to encrypt the drives on all company machines, as well as all removable storage devices (USB Flash drives, External Hard Drives, ETC.). This works seamlessly for all built in storage, but for
    removable media, it is forcing write protection on the drives after encryption, even after the drive is unlocked using the Bitlocker passcode. We still want to maintain the enforcement of encrypting anything that may contain private company data, including
    all removable storage devices, but want to still be able to write to them after they are encrypted. Is this normal? Is there any way to have all removable storage devices encrypted but disable write protection once they are unlocked?

    In Group Policy, our status for Deny write access to removable drives not protected by Bitlocker is enabled. When a user plugs in an external storage device, it prompts them to encrypt their device using bitlocker before they are permitted to write to it.
    It then encrypts it if the user chooses to do so, or only allows read access if they refuse. Once it is encrypted, the device is writable at that time, but once it is removed and plugged back in (To the same machine, or another machine in the same network/organization),
    it prompts for the password that was set. Once the password is entered, it shows the device as being unlocked, but when you try to write to it, it says that "This disk is write protected."

    Additionally, if it helps, we do not push any other removable media GP bitlocker related options such as 'Deny write access to devices configured in another organization' or 'Allow access to BitLocker-protected removable data drives from earlier versions
    of Windows', so it would most likely be whatever the default setting is. However, every removable media device we have tested with has been new, empty, and unencrypted until into we plug into one of our machines and encrypt with Bitlocker. Still, could adding
    one of these policies (Or maybe another I am not familiar with) as 'Enabled' potentially resolve the issue?

    Any help would be greatly appreciated, as I am running out of things to try, and can not find any threads where people have run into this issue.

    Thanks!
     
    DanielBrent2113, Oct 27, 2019
    #3
  4. Deny Write Access to Fixed Data Drives not Protected by BitLocker

    Bitlocker making removable media Write Protected

    Our status for Deny write access to removable drives not protected by Bitlocker is enabled. And it prompts a user to encrypt their device using bitlocker before they are permitted to write to it. It then encrypts it if the user chooses to do so, or only
    allows read access. Once it is encrypted, the device is writable at that time, but once it is removed and plugged back in (To the same machine, or another machine in the same network/organization), it prompts for the password that was set. Once the password
    is entered, it shows the device as being unlocked, but when you try to write to it, it says that "This disk is write protected."
     
    DanielBrent2113, Oct 27, 2019
    #4
  5. rda62 Win User
    How to enable Bitlocker for Fixed Drives?

    Hi All,

    I'm on Windows 10 Pro, Bitlocker (without TPM) is enabled and working for Removable drives, as well as the OS Drive.

    I have an additional 2TB internal SATA drive that Bitlocker does not see. I do not get the option to enable Bitlocker, in the right click context menu for the drive.

    If I go to Manage Bitlocker, the drive is not listed as a fixed data drive. It's not listed at all.

    There is nothing wrong with the drive itself. In its current unencrypted state, I have data stored on it, and can access, read and write to all of the drives contents.

    I've checked through the bitlocker group policy options, and I've googled this to death. Any help, short of a format/reload would be greatly appreciated.
     
    rda62, Oct 27, 2019
    #5
  6. Activate Bitlocker for data drive partition

    Hi,

    Welcome to Microsoft Community and thank you for your interest in Windows 10.

    BitLocker
    Drive Encryption is one of the best security tools of Windows operating system. This feature of
    Windows 10 safeguards your stored data in fixed or removable drives of your storage system. When you turn on
    BitLocker it saves data on any drive and encrypt it automatically. When you encrypt drive, it
    protects everything with passwords on that drive whether it is file or document. In today’s
    Windows 10 tutorial, we will take you through Encrypt Drive Partition using Bitlocker process with
    BitLocker which will support your system in protecting its data.

    Get Into BitLocker Drive Encryption Window in Windows 10


    To Encrypt Drive Partition using Bitlocker you need to access BitLocker Encryption Window First. For this,

    • Open Cortana Search.
    • Type BitLocker in the search field.
    • And in the search results select Manage BitLocker option.
    • BitLocker
      Drive Encryption window pops up on your screen.
    Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.
     
    Karthicka_R, Oct 27, 2019
    #6
Thema:

Deny Write Access to Fixed Data Drives not Protected by BitLocker

Loading...
  1. Deny Write Access to Fixed Data Drives not Protected by BitLocker - Similar Threads - Deny Write Access

  2. Workaround to access data when: External Hard Drive "is not accessible. Access is denied."

    in Windows 10 Network and Sharing
    Workaround to access data when: External Hard Drive "is not accessible. Access is denied.": I got the dreaded "[Drive] is not accessible" message after plugging my external USB hard drive into a new desktop computer. [ATTACH] The drive showed up fine in Disk Management, And after scouring the Internet for solutions, all of the Permissions were fine, as well is...
  3. Deny Write Access to Fixed Drives not Protected by BitLocker in Windows 10

    in Windows 10 News
    Deny Write Access to Fixed Drives not Protected by BitLocker in Windows 10: [ATTACH] [ATTACH]You can set a policy that configures whether BitLocker protection is required for a computer to be able to write data to fixed data drives. All fixed data drives that are not BitLocker-protected will be mounted as Read-only. If the [...] This post Deny Write...
  4. write protected drive G

    in Windows 10 Network and Sharing
    write protected drive G: I have an android phone and am trying to transfer music on a micro flash. Keep getting write protected when I try to transfer anything. I didn't write protect it, how do I turn off the write protection thanks...
  5. USB Flash drive is write protected

    in Windows 10 Network and Sharing
    USB Flash drive is write protected: Hello, When I insert my pendrive into my windows 10 PC, it says I have to format it before I use it. But when I format it, it says the pendrive is "write protected" and can't format it. How can I solve this "write protected" error, please? Thanks in advance!...
  6. USB Flash drive is write-protected

    in Windows 10 Drivers and Hardware
    USB Flash drive is write-protected: Hello, When I insert my pendrive into my windows 10 PC, it says I have to format it before I use it. But when I format it, it says the pendrive is "write-protected" and can't format it. How can I solve this "write-protected" error, please? Thanks in advance! Tanzil ***...
  7. Flash Drive - Write Protected - Format

    in Windows 10 Drivers and Hardware
    Flash Drive - Write Protected - Format: I have (3) Microsoft brand 32 GB thumb drives that have Win 8.1 and preload software for my HP laptop, I have no use for them, and I'm certainly not ever going to put Win 8.1 back on my laptop, I spend most of time on my Surface and desktop PC, laptop is a backup device that...
  8. Deny Write Access to Removable Drives not Protected by BitLocker

    in Windows 10 Tutorials
    Deny Write Access to Removable Drives not Protected by BitLocker: How to: Deny Write Access to Removable Drives not Protected by BitLocker Allow or Deny Write Access to Removable Drives not Protected by BitLocker in Windows You can use BitLocker Drive Encryption to help protect your files on an entire drive. BitLocker can help block...
  9. Access Denies Program Data

    in Windows 10 Support
    Access Denies Program Data: Hi, I'm running Windows 10 on a Surface Pro and I have screwed up permissions on C:\Programdata and I can no longer install software. The reason for this is as follows... - I was trying to restrict access / control etc to the folder C:\Programdata for all users on my...
  10. Lost access to drive - "Access is Denied"

    in Windows 10 Support
    Lost access to drive - "Access is Denied": I'm having a serious issue here with my external USB 3.0 HDD enclosures. They used to work fine with Windows 7. Now with Windows 10 I fought all last week trying to get Windows 10 to see the enclosures. I have no idea what happened but suddenly Window 10 was able to see the...