Device Control with Group Policy

Q: Is there a way to restict users on a workstation from accessing the floppy drive, CD-ROM drive, and USB drive by using security settings in Group Policy?

A: According to security expert Randy Franklin Smith, "Only with Windows Vista in Group Policy under Computer ConfigurationAdministrative TemplatesSystemRemovable Storage Access."

If you aren't on Vista yet, you can use one of many products designed to control access to these drives. To read about some of them, see the following Windows IT Pro articles:

"SecureWave Safeguards Portable Storage Devices," InstantDoc ID 47441

"DeviceShield," InstantDoc ID 93382

"Client Device Managers," InstantDoc ID 93926