Disable CD\DVD burning\writing-to policy

[Migration User]

Hi guys,

Any recommendations on the best way to set up a policy in SEPM to disable my users from writing to DVDs and CDs?
Reading from is obviously allowed.

 

Thanks a million!

[ℬrίαη]

This is Symantec's recommendation:

How to block CD/DVD Writing in Windows 7

[Migration User]

Thank you!

Question for you: can i have more than 1 application and device control assigned to an OU on SEPM? 
I have one that is blocking USB drives but when i want to deploy the one i just created based on your article and deploy it, it tells me that it'll replace the current one.

Thoughts?

[ℬrίαη]

One policy per group. You can create sub groups and move the machines in there you want the policy to apply to. But clients can only have one policy.

[Migration User]

Is there any way to merge both of them to one?

[ℬrίαη]

Right click the rule you just created and "Copy". Paste it in to the other policy.

[Migration User]

You mean from where i see all the policies?
I am able to right-click and then hit "copy" but then when i click on the policy i'd like to paste it to and do right-click and paste it just creates another copy of the policy i am trying to copy.

[ℬrίαη]

No, go into the policy you just created. Right click the application rule you just created and select "Copy". Paste it into the new policy.

[Migration User]

Done.
Will it block 3rd party software for CD burning or just the built-in Windows one?

[ℬrίαη]

Windows only