https://winaero.com/deny-write-to-fixed-drives-not-protected-by-bitlocker/