This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(268.8, 99%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
For security reasons, I want to diable the Windows 10 functionality mounting ISO image files. Is there any GPO to deactivate the possibility of mounting an image as a drive?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 81%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
There is no setting in the Group Policy to do this, however I advise you to open start and search for feedback and open the Feedback Hub app and send a feedback and suggest this feature and make sure specify why you want this feature.
You may tell us about your business requirement and we might be able to share you alternative ways.
For example, in some cases you may use AppLocker or Software Restriction Policy to control what is permit to run and what is not.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(124.80000000000001, 67%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECE%3C/text%3E%3C/svg%3E)
A decent solution is here: https://malicious.link/post/2022/blocking-iso-mounting/
In short, Group Policy / Administrative Templates / System / Device Installation / Device Installation Restrictions / Prevent installation of devices that match any of these device IDs / Enable and set: SCSI\CdRomMsft____Virtual_DVD-ROM_
Kudos to Rob Fuller.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 28.999999999999996%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVW%3C/text%3E%3C/svg%3E)
Hi,
Thank you for posting in our forum
According to my knowledge, there is no way to do it through GPO, you can do it by trying to modify the registry
Regedit -> HKEY_CLASSES_ROOT -> Windows.ISO.File -> shell -> delete 'mount'
Hope this information can help you
Good blessing
Vicky
Hello Vicky,
thank you for your answer. It is correct: This key remove the mount dialog in the Explorer.
Nevertheless it seems that the mount functionality is still working (e.g. you can mount by command prompt).
In order to close a possible vulnerability I would prefer to deactivate the functionality itself.
Kind regards
Philipp
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 57.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERL%3C/text%3E%3C/svg%3E)
typo correction: Regedit -> HKEY_CLASSES_ROOT -> Windows.IsoFile -> shell -> delete 'mount'
And I d'ont recommand deleting the "directory" but changing thwe command to something inofensive instead the day your ganna want to take it back is gonna be much less painfull to revert
here what command i used: %SystemRoot%\ls
Windows cannont mount it but i'm still able to use a tool lik PowerIso® to read it
Hi,
I am glad to hear that your issue was successfully resolved. If there is anything else we can do for you, please feel free to post in the forum.
Best Regards,
Vicky
