0
I'm trying to achieve this point:
- Disable Read Access to Removable Devices from Registry / GPO
- Enable Write Access to Removable Devices from Registry / GPO
What I've tried so far:
- From gpedit.msc
Then : gpupdate /force from cmd shell
The Problem:
- Now trying to paste a test file on the Removable drive to test if write access is granted, and the problem is described in the following animation
Question: How to achieve this goal? enable write access and disable read access to removable devices on Windows clients via any available method.
M. Abdelhafid
Posted 2019-07-17T15:20:20.197
Reputation: 282
Are you on a domain/using an active directory? – NiallUK – 2019-07-17T15:22:22.543
@NiallJones Yes! domain with AD, currently testing offline – M. Abdelhafid – 2019-07-17T15:23:22.253
You can't write without read access as writing requires reading the file system. – DavidPostill – 2019-07-17T16:10:05.917
Your question might benefit from explaining why you want to achieve this seemingly-strange combination of 'write-but-no-read' permissions :) – bertieb – 2019-07-17T16:17:08.453
1
From this page it looks like it's not possible, because write needs read as DavidPostill pointed out
– Moshe Gross – 2019-07-17T18:55:17.617