https://winaero.com/deny-write-access-to-removable-drives-not-protected-by-bitlocker/