How to Set Dev Drive as Trusted or Untrusted in Windows 11
A Dev Drive in Windows 11 is a special storage drive built for coding and building software, and setting it as trusted or untrusted tells Windows Defender how strictly to scan your files. Windows 11 version 22H2 and newer include native support for these high-speed drives.
Marking your Dev Drive as trusted tells Windows Defender to skip routine background scans so your computer builds code faster. Setting the drive to untrusted turns full virus scans back on to keep your PC secure, even if it slows down your build tasks.
Open Windows Terminal as Administrator and use commands like `fsutil devdrv trust :` to set it as trusted for better performance. Use `fsutil devdrv untrust :` for enhanced security, though it may be slower.
What is a Dev Drive?
Built on ReFS (Resilient File System), a Dev Drive is a specialized storage volume designed to accelerate file operations for programming projects. Under the hood, these drives use ReFS (Resilient File System), a specialized file format designed to handle heavy developer workloads. Windows treats a Dev Drive as trusted by default, helping Windows Defender run faster while protecting data integrity.
Windows defaults to trusting any newly created Dev Drive. Windows Defender (the built-in security software) runs in an optimized performance mode on that volume, balancing robust security with fast file access.
Marking a Dev Drive as untrusted triggers stricter protection from Windows Defender. The program applies real-time protection protocols to untrusted Dev Drives, increasing security at the expense of potential performance overhead.
How to Set a Dev Drive as Trusted or Untrusted
Checking and changing the trust status of a Dev Drive requires a few specific terminal commands.
Step 1Open Windows Terminal as Administrator
⚠️ Requires admin privileges
- Click the Start menu (Windows icon in the bottom-left corner).
- Type Terminal in the search box.
- When you see Windows Terminal in the results, right-click it and select Run as administrator.
Step 2Check Your Dev Drive's Current Status
Checking the current configuration requires opening Windows Terminal and running the query command with the correct drive letter. Executing `fsutil devdrv query :` followed by the drive designation reveals the current state. A returned value of '0' indicates an untrusted drive, while '1' confirms trusted status.
fsutil devdrv query <drive letter>:Substitute the placeholder with the actual drive letter assigned to the storage volume. Targeting the W: drive requires entering the following command:
Windows 11 users can improve Dev Drive performance by changing its trust status from untrusted to trusted. This command activates performance optimizations. Running the `DevDriveManager.exe` tool completes the trust update.
fsutil devdrv trust W:Execution of this command marks the W: drive as trusted.
Step 4Set the Dev Drive as Untrusted
Restricting a Dev Drive to untrusted status requires a specific command inside Windows Terminal. Storing sensitive source code on the volume benefits from enforcing Windows Defender real-time protection. Executing `fsutil devdrv untrust W:` and pressing Enter restricts the specified W: drive.
fsutil devdrv untrust W:This terminal command changes the W: drive designation to untrusted.
Summary
- Trusted Dev Drive: Windows Defender runs in faster performance mode.
- Untrusted Dev Drive: Defender uses real-time protection, which is more secure but slower.
- You can easily switch between trusted and untrusted using simple commands in Windows Terminal.
Trusted Dev Drives allow Windows Defender to operate in a high-performance mode, maximizing speed during coding workflows. Conversely, untrusted Dev Drives enforce full real-time protection for enhanced security, introducing potential latency to file operations. Switching between these states happens entirely through Windows Terminal commands.
Learn More
Consult the official Microsoft documentation on Trusted Dev Drives for additional technical details.
How do I turn off dev drive protection?
Checking whether the dev drive feature is disabled requires opening Windows Settings, navigating to System, selecting Storage, expanding Advanced storage settings, and clicking Disks & volumes.
What is a dev drive in 🪟 Windows 11?
Heavy memory demands and file access bottlenecks often degrade system responsiveness. Microsoft created the dev drive feature built on ReFS (Resilient File System) specifically to resolve this issue by optimizing file operations for large numbers of small files.
How do I disable Dev Drive antivirus?
Navigating to Virus & threat protection settings via Manage settings allows disabling Real-time protection and Dev Drive protection where applicable.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!