We recommend that customers who want to preserve operating-system-level disk permissions for secondary disks that are marked as 'removable' perform one of the following hardening steps:Įnable Microsoft Bitlocker (recommended).Įnable controls for read and write access to removable devices or media.Įnable controls for read and write access to removable devices or media

If the MediaType that is returned is 'Removable Media' or 'External hard disk media,' the configuration is affected by the issue that is documented in this article.

This script will return output that resembles the following: Get-WmiObject -Class Win32_DiskDrive | Format-Table Name,Model, MediaType Type the following command at the Windows PowerShell prompt: Type the following command at the elevated command prompt, and then press Enter: To do this, click Start, type CMD, right-click Cmd.exe, and then click Run as Administrator.

How to tell if your environment is affected For example, this includes systems multiple disks that are running Windows Vista, Windows 7 and Windows 8. Systems that are affected in a default configuration are primarily at risk. This issue does not affect the primary system volume (that is, the device from which Windows is currently running). We are aware of situations in which disks on certain storage controllers may be marked as 'removable' regardless of physical position inside or outside the computer case or the kind of connection that is used by the disk.

We are aware that this issue may affect internal disks, fixed disks that are marked as removable, and also external media such as USB, Firewire, E-SATA, SD, and other removable media. These tools can bypass NTFS file permissions on non-server distributions of Microsoft Windows. We are aware of detailed information and tools that can be used to access files on removable devices. Windows RT Windows 8 Windows 8 Enterprise Windows 8 Pro Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows 7 Home Premium Windows 7 Home Basic Windows 7 Service Pack 1 Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows 7 Home Premium Windows 7 Home Basic Windows Vista Service Pack 2 Windows Vista Business Windows Vista Enterprise Windows Vista Home Basic Windows Vista Home Premium Windows Vista Starter Windows Vista Ultimate Windows Vista Enterprise 64-bit Edition Windows Vista Home Basic 64-bit Edition Windows Vista Home Premium 64-bit Edition Windows Vista Ultimate 64-bit Edition Windows Vista Business 64-bit Edition More.

External hard drive read only ntfs