This tutorial will show you how to enable or disable the ability to create a Dev Drive for all users in Windows 11.
Dev Drive is a new form of storage volume available to improve performance for key developer workloads. Dev Drive is built upon Resilient File System (ReFS) technology and includes file system optimizations and features that provide more control over storage volume settings and security, including trust designation, antivirus configuration, and administrative control over what filters are attached. It has been designed to meet a developer’s needs to host project source code, working folders, and package caches. It is not designed for general consumer workloads such as document libraries, installing packaged applications or non-developer tools.
By default, to give the best possible performance, creating a Dev Drive automatically grants trust in the new volume. A trusted Dev Drive volume causes real-time protection to run in a special asynchronous “performance mode” for that volume. Running performance mode provides a balance between threat protection and performance. The balance is achieved by deferring security scans until after the open file operation has completed, instead of performing the security scan synchronously while the file operation is being processed. This mode of performing security scans inherently provides faster performance, but with less protection. However, enabling performance mode provides significantly better protection than other performance tuning methods such as using folder exclusions, which block security scans altogether.
If you like, you can disable the ability to create a dev drive for all users on the device. This will not affect any current dev drives.
Reference:
Configure Dev Drive policy for enterprise business devices
Group Policy managers will need to make policy updates in order to enable Dev Drive on Windows 11 devices. Find guidance for using Microsoft InTune, Configuration Manager, or Local Group Policy Editor to update policy, enable Dev Drive, and set security filter permissions.
learn.microsoft.com
You must be signed in as an administrator to enable or disable the ability to create a Dev Drive.
Contents
- Option One: Enable or Disable Create Dev Drive using Command
- Option Two: Enable or Disable Create Dev Drive in Local Group Policy Editor
- Option Three: Enable or Disable Create Dev Drive using REG file
EXAMPLE: Create a dev drive enabled and disabled
fsutil devdrv
Reference article for the fsutil devdrv command, which groups dev drive related functionality.
learn.microsoft.com
1 Open Windows Terminal (Admin), and select either Windows PowerShell or Command Prompt.
2 Copy and paste the command below you want to use into Windows Terminal (Admin), and press Enter.
(Enable - default)
fsutil devdrv enableOR
(Disable)
fsutil devdrv disable3 You can now close Windows Terminal (Admin) if you like.
The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.
All editions can use Option Three to configure the same policy.
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the location below in the left pane of Local Group Policy Editor. (see screenshot below)
Computer Configuration > Administrative Templates > System > Filesystem
3 In the right pane of Filesystem, double click/tap on the Enable dev drive policy to edit it. (see screenshot above)
4 Do step 5 (enable) or step 6 (disable) below for what you want.
5 Enable Create Dev Drive
This is the default setting.
A) Select (dot) Not Configured. (see screenshot below)
B) Click/tap on OK, and go to step 7.
6 Disable Create Dev Drive
This will override Option One.
A) Select (dot) Disabled. (see screenshot below)
B) Click/tap on OK, and go to step 7.
7 You can now close the Local Group Policy Editor if you like.
1 Do step 2 (enable) or step 3 (disable) below for what you want.
2 Enable Create Dev Drive
This is the default setting.
A) Click/tap on the Download button below to download the .reg file below, and go to step 4 below.
Enable_create_dev_drive.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies]
"FsEnableDevDrive"=-
"FltmgrDevDriveAllowAntivirusFilter"=-3 Disable Create Dev Drive
This will override Option One.
A) Click/tap on the Download button below to download the .reg file below, and go to step 4 below.
Disable_create_dev_drive.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies]
"FsEnableDevDrive"=dword:00000000
"FltmgrDevDriveAllowAntivirusFilter"=dword:000000004 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 You can delete the downloaded .reg file if you like.
That's it,
Shawn Brink
Last edited:
