Windows 11/10 allows enabling a special policy that prevents Write operations to Fixed Drives that are not protected by BitLocker. Learn about the GPEDIT setting for this.