ADMX Viewer
Microsoft.Policies.VolumeEncryption• Machine

Deny write access to fixed drives not protected by BitLocker

This policy setting determines whether BitLocker protection is required for fixed data drives to be writable on a computer. If you enable this policy setting, all fixed data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access. If you disable or do not configure this policy setting, all fixed data drives on the computer will be mounted with read and write access.

Policy Details

Policy Name
FDVDenyWriteAccess_Name
Registry Key
System\CurrentControlSet\Policies\Microsoft\FVE
Value Name
FDVDenyWriteAccess
Supported On
At least Windows Server 2008 R2 or Windows 7
OMA-URI (CSP)
BitLocker/FixedDrivesRequireEncryption
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us