diff --git a/test/parallel/test-module-readonly.js b/test/parallel/test-module-readonly.js
new file mode 100644
index 00000000000000..cd6ffff6860f99
--- /dev/null
+++ b/test/parallel/test-module-readonly.js
@@ -0,0 +1,36 @@
+const fs = require('fs');
+const path = require('path');
+const cp = require('child_process');
+
+const tmpdir = require('../common/tmpdir');
+tmpdir.refresh();
+
+if (process.platform == 'win32') {
+    // Create readOnlyMod.js and set to read only
+    const readOnlyMod = path.join(tmpdir.path, 'readOnlyMod');
+    const readOnlyModRelative = path.relative(__dirname, readOnlyMod);
+    const readOnlyModFullPath = readOnlyMod + ".js";
+    fs.writeFileSync(readOnlyModFullPath, "module.exports = 42;");
+
+    // Removed any inherited ACEs, and any explicitly granted ACEs for the current user
+    cp.execSync(`icacls.exe "${readOnlyModFullPath}" /inheritance:r /remove "%USERNAME%"`);
+    // Grant the current user read & execute only
+    cp.execSync(`icacls.exe "${readOnlyModFullPath}" /grant "%USERNAME%":RX`);
+
+    let except = null;
+    try {
+        // Attempt to load the module. Will fail if write access is required
+        const mymod = require(readOnlyModRelative);
+    } catch(err) {
+        except = err;
+    }
+
+    // Remove the expliclty granted rights, and reenable inheritance
+    cp.execSync(`icacls.exe "${readOnlyModFullPath}" /remove "%USERNAME%" /inheritance:e`);
+
+    // Delete the file
+    fs.unlinkSync(readOnlyModFullPath);
+
+    if (except) throw except;
+}
+// TODO: Similar checks on *nix-like systems (e.g. using chmod or the like)