A USB flash drive or SD card typically shows as write-protected after an upgrade to Windows 11 for one of these reasons:
- Physical write-protect switch
Some removable devices (especially SD cards and some USB sticks) have a small physical switch that locks the device. If this switch is set to “lock,” Windows will report the drive as write-protected and block saving, deleting, or modifying files. Move the switch to the unlocked position and reconnect the device.
- Domain or local Group Policy enforcing write protection
If the PC is joined to a domain (work or school), a Group Policy Object (GPO) can enforce write protection on removable storage. After an OS upgrade, these policies may be reapplied or changed, causing a previously writable drive to become write-protected.
In that case, local registry or local Group Policy changes will not persist; the domain GPO overrides them when policies refresh. Typical symptoms:
- Windows shows the USB drive as write-protected or locked.
- Attempts to disable write protection locally revert after restart.
To fix this in a domain environment (IT/admin action required):
- Identify which GPO is enforcing USB write protection:
- In the GPO, check:
- Computer Configuration > Administrative Templates > System > Removable Storage Access
- Look for Removable Disks: Deny write access and similar settings.
- Set those policies to Not configured or Disabled if write access is required.
- On the client PC, run:
gpupdate /force
- Disconnect and reconnect the USB device, then test writing a file.
If the machine is not domain-joined, similar settings might be configured in Local Group Policy or security software, but the context here specifically covers domain GPO as the common cause.
If none of the above applies, and the device still shows as write-protected, the issue may be with the device hardware or other settings not covered in this context.
References: