Before you begin, you should know that:

Allow or Deny Write Access to Fixed Drives not Protected by BitLocker

To configure the Allow or Deny Write Access to Fixed Data Drives not Protected by BitLocker setting using the Group Policy Editor: Open the Local Group Policy Editor. On the left pane of Local Group Policy Editor, navigate to the location:

On the right pane of Fixed Data Drives in Local Group Policy Editor, double-click Deny write access to fixed drives not protected by BitLocker policy to edit it. If you enable this policy setting, all fixed data drives that are not BitLocker-protected will be mounted as read-only. If the drive is protected by BitLocker, it will be mounted with read and write access. If you disable or do not configure this policy setting, all fixed data drives on the computer will be mounted with read and write access.

Not Configured is the default setting. To configure the setting, do the following: To Allow: Select the radio button for Not Configured or Disabled, and click OK. To Deny: Select the radio button for Enabled, and click OK. You can now exit the Group Policy editor. Restart the computer for changes to take effect.

Deny Write Access to Fixed Drives not Protected by BitLocker - 41