sodcalculator

10 Tech How-To

Disable Deny Write Access to USB Drive on Windows 10

Guide 10-23956 · Updated · Step by step

This guide explains how to remove the “Deny write access to USB drive” policy on Windows 10, which is often set by administrators to prevent writing data to removable storage. By disabling this policy, you and other users will be able to copy files to USB drives again. This process requires administrative privileges on the computer.

What You’ll Need

  • An account with administrator privileges on the Windows 10 PC.
  • A USB drive (optional, to test the fix).

Step-by-Step

  1. Open the Local Group Policy Editor. Press Win + R to open the Run dialog, type gpedit.msc, and press Enter. If you see a User Account Control prompt, click Yes to allow it.
  2. Navigate to the Removable Storage Policies folder. In the left pane, go to: Computer Configuration → Administrative Templates → System → Removable Storage Access.
  3. Find the policy. In the right pane, scroll down and double-click “Deny write access to removable drives” (note: the exact wording may be “Removable Disks: Deny write access” depending on your Windows version).
  4. Disable the policy. In the dialog that opens, select Disabled (or Not Configured if you want to allow the default behavior). Click OK.
  5. Close the Group Policy Editor. The change is applied immediately, but some systems may require a refresh. To force an update, open Command Prompt as administrator and run gpupdate /force.
  6. Test the fix. Plug in a USB drive and try copying a file to it. If it works, the policy is successfully disabled.

Common Mistakes

  • Editing the wrong policy. There are several USB-related policies; make sure you’re changing the “Deny write access” one, not “Deny read access” or “All removable storage classes: Deny all access”.
  • Not having admin rights. Without admin privileges, you can’t open gpedit.msc or change policies. Log in with an administrator account.
  • Forgetting to refresh Group Policy. Sometimes the change doesn’t take effect immediately. Running gpupdate /force ensures the policy is applied.
  • Overlooking registry-based policies. If the policy is set via the registry (common in some corporate environments), the Group Policy Editor might not show it. In that case, you’ll need to edit the registry directly (see Troubleshooting).

Tips

  • Check if the policy is actually set. Before changing anything, verify that the policy is indeed enabled. If it’s “Not Configured”, the write issue might be caused by something else (e.g., file permissions, drive encryption, or hardware).
  • Use the Group Policy Editor only on Pro or Enterprise editions. Windows 10 Home doesn’t have gpedit.msc. If you’re on Home, you’ll need to edit the registry manually.
  • Consider the security implications. Disabling this policy allows any user to write to USB drives, which could be a security risk in corporate or shared environments. Only disable it if you’re sure it’s safe.
  • Create a system restore point before making changes, especially if you’re editing the registry, to revert if something goes wrong.

Troubleshooting

If the policy change doesn’t work:

  • Check the registry. Sometimes the policy is enforced through the registry. Open Registry Editor (regedit) and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices. Look for a key named {53f5630d-b6bf-11d0-94f2-00a0c91efb8b}. If it exists, set the Deny_Write value to 0 (or delete the key). If you don’t see this path, the policy isn’t registry-based.
  • Check for third-party security software. Antivirus or endpoint protection software can override Windows policies. Temporarily disable such software (if allowed) to see if it’s blocking writes.
  • Check the drive’s file system. If the USB is formatted as NTFS, permissions might block writes. Right-click the drive in File Explorer, go to Properties → Security, and ensure your user has “Full control” or “Modify” permissions.
  • Verify the drive isn’t write-protected. Some USB drives have a physical switch. Also, check if the drive is set to read-only via diskpart: open Command Prompt as admin, run diskpart, then list disk, select disk X (where X is your USB), and attributes disk. If “Read-only” is set, use attributes disk clear readonly.
  • If you’re on Windows 10 Home, you can’t use gpedit.msc. Instead, use the registry method described above. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\RemovableStorageDevices, create the key {53f5630d-b6bf-11d0-94f2-00a0c91efb8b} if it doesn’t exist, and set Deny_Write to 0.

Frequently Asked Questions

Why can’t I write to my USB drive even after disabling the policy?

There could be other causes: the drive might be physically write-protected, formatted with a read-only file system, or have incorrect permissions. Check those before assuming the policy is the culprit.

Is this policy the same as “Deny write access to all removable storage classes”?

No. The policy we’re disabling applies specifically to removable drives (like USB sticks). The “all removable storage classes” policy covers a broader range, including memory cards and portable media players. If that one is enabled, you’ll need to disable it as well.

Do I need to restart my computer after changing the policy?

Usually not. Group Policy changes are applied immediately, but running gpupdate /force ensures a refresh. A restart is only necessary if the policy affects system services that don’t reload dynamically.

Can I disable this policy for a specific user only?

Yes, you can set the policy under User Configuration instead of Computer Configuration. That applies only to the current user. However, if both are set, the more restrictive one usually wins.

What if I don’t have gpedit.msc on Windows 10 Home?

Windows 10 Home doesn’t include the Group Policy Editor. You can either upgrade to Pro or edit the registry directly, as described in the Troubleshooting section.

Is it safe to delete the registry key related to this policy?

Deleting the key {53f5630d-b6bf-11d0-94f2-00a0c91efb8b} under RemovableStorageDevices will remove the policy settings. It’s safe if you’re sure you want to allow write access. Always back up the registry before making changes.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →