Preventing Non-Admin Users from Cutting, Copying, and Pasting Games/Programs to External Drives in Windows 10
As a system administrator or a concerned parent, you might have encountered situations where non-admin users copy, cut, or paste games and programs to external drives. This could lead to software piracy and data security issues. This article covers the steps to prevent non-admin users from cutting, copying, and pasting games/programs to external drives in Windows 10 systems while allowing some flexibility.
Understanding File System Permissions in Windows 10
File system permissions in Windows 10 allow you to control who can access, modify, or delete files and folders. By default, the Administrators group has complete control over the system, while standard users have limited access.
Reviewing Current Permissions
To review current permissions for a folder or drive:
- Right-click the folder or drive.
- Select
Properties. - Go to the
Securitytab. - Click
Advanced. - You can view and modify permissions on this screen.
Prevents Users from Copying, Cutting, or Pasting Data to External Drives
To prevent users from copying, cutting, or pasting data to external drives:
- Open the
Group Policy Editor. - Go to
User Configuration > Administrative Templates > System. - Double-click
Removable Storage Access. - Select
Deny execute accessfor each removable storage class, such asCD and DVD,Removable Disks, andAll Removable Storage.
Note: This approach disables access to all removable storage devices, not just external drives. To allow access to certain drives, allowlist the devices using the Device Installation Restriction settings in the Group Policy Editor. For detailed instructions, read this Microsoft support article.
Additional Software Solutions
Consider using third-party software solutions that provide better control over removable storage devices:
To prevent non-admin users from cutting, copying, and pasting games/programs to external drives:
- Understand file system permissions in Windows 10.
- Review current permissions for target folders or drives.
- Use Group Policy Editor to deny execute access to removable storage.
- Consider third-party software solutions for granular control.