external help file: AdminUI.PS.dll-Help.xml Module Name: ConfigurationManager ms.date: 08/18/2020 online version: schema: 2.0.0
Create a policy to configure whether BitLocker protection is required for removable data drives to be writable on a computer.
New-CMRDVDenyWriteAccessPolicy [-PolicyState <State>] [-AllowWriteAccessToExternalOrganizationDrives]
[-DisableWildcardHandling] [-ForceWildcardHandling] [<CommonParameters>]
Create a policy to configure whether BitLocker protection is required for removable data drives to be writable on a computer.
This example creates a new policy that's enabled
New-CMRDVDenyWriteAccessPolicy -PolicyState EnabledAdd this parameter to allow a removable data drive to be writeable without checking identification fields.
If you don't add this parameter, only drives with identification fields matching the computer's identification fields are writeable. When the system accesses a removable data drive, Windows checks for a valid identification field and allowed identification fields. These fields are defined by the "Provide the unique identifiers for your organization" policy setting. For more information, see New-CMUidPolicy.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseThis parameter treats wildcard characters as literal character values. You can't combine it with ForceWildcardHandling.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseThis parameter processes wildcard characters and may lead to unexpected behavior (not recommended). You can't combine it with DisableWildcardHandling.
Type: SwitchParameter
Parameter Sets: (All)
Aliases:
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseUse this parameter to configure the policy.
-
Enabled: If you enable this policy setting, Windows mounts all removable data drives that BitLocker doesn't protect as read-only. If BitLocker protects the drive, Windows mounts it with read and write access. -
DisabledorNotConfigured: If you disable or don't configure this policy setting, Windows mounts all removable data drives on the computer with read and write access.
Type: State
Parameter Sets: (All)
Aliases:
Accepted values: Enabled, Disabled, NotConfigured
Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: FalseThis cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.