External hard drives are read-only after enrolling windows machines to Intune.

Question

Hi, i'm trying to figure out how can i fix that.

These options are disabled:

Deny write access to removable drives not protected by BitLocker Deny write access to fixed drives not protected by BitLocker what do i miss here? where else i need to check?

Answer 1

@Eyal Tzaig,Thanks for posting in Q&A.

From your description, I know external hard drives are read-only after enrolling windows machines to Intune.

Based on my research, there may be some security baselines in Intune that may make these options disabled, you can check it.

https://learn.microsoft.com/en-us/mem/intune/protect/security-baselines#intune-security-baseline-overview

Hope it will help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

There are multiple different ways to configure Bitlocker in Intune; settings catalog, old admin templates, disk encryption under Endpoint Security and Defender & Windows Security baselines. Try to identify, do you have any other configurations containing some bitlocker options enabled.

Answer 3

It was at security baselines. Thank you.