Endpoint Protection

 View Only

  • 1.  Making CD/DVD Read-only

    Posted Jun 09, 2009 06:49 PM
     
    I know this was an issue in the past but I'm wondering if it has been rectified?!  Preventing data from being copied out of an organization is pretty tough without being able to block CD/DVD.  If it hasn't been rectified, has anyone found a workaround?


  • 2.  RE: Making CD/DVD Read-only

    Posted Jun 09, 2009 10:54 PM
    You can block CD/DVD drives using device control with SEP, otherwise you will need to rely on third-party product to either encrypt data written to CDs or block them in some other manner. 


  • 3.  RE: Making CD/DVD Read-only

    Posted Jun 10, 2009 12:19 AM
    You can block CD/DVDs entirely (both read and write) but you can not make them read-only with SEP (as you could with Altiris ESS; Senforce)? 


  • 4.  RE: Making CD/DVD Read-only

    Posted Jun 10, 2009 01:52 AM
    I think this can be achieved Via Group Policy as well.

    You can also completely disable built in XP CD/DVD writing by
    disabling the XP IMAPI service. Control Panel -> Administrative Tools
    -> Services ->IMAPI CD-Burning COM Service -> Startup Type ->
    Disabled.

    Local Computer Policy\User Configuration\Administrative Templates\
    Windows Components\Windows Explorer\
    Remove CD Burning features


  • 5.  RE: Making CD/DVD Read-only

    Posted Jun 10, 2009 11:14 PM

    Unfortunately there is not a way for SEP to handle this.  The above GPO configurations do not prevent 3rd party apps from burning but only disables the Windows burning features.