Managing Removable Storage Devices and Printers
Despite an otherwise pervasive focus on security, Windows 2000 and Windows XP allow essentially unfettered access to hardware devices that are connected to a computer. If you want to prevent users from writing data to floppy disks, writable CDs, or Zip disks, for instance, you must physically lock the drive or use Group Policy, as explained in Exploring Security Options. Unfortunately, the restrictions imposed through Group Policy are inadequate for preventing theft of files.
Restricting Access to Removable Storage Devices
The wide availability of portable storage devices such as USB flash drives (UFDs), MP3 players, and digital cameras provides a convenient method for someone who has physical access ...