Treat external storage devices as read-only

When this policy is set to true, users cannot write anything to external storage devices.

If this setting is set to false or not configured, then users can create and modify files of external storage devices which are physically writable.

The ExternalStorageDisabled policy takes precedence over this policy – if ExternalStorageDisabled is set to true, then all access to external storage is disabled and this policy is consequently ignored.

Dynamic refresh of this policy is supported in M56 and later.

Supported on: SUPPORTED_WIN7

Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Google\ChromeOS
Value NameExternalStorageReadOnly
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

chromeos.admx

Administrative Templates (Computers)

Administrative Templates (Users)