Prevent use of writable CD/DVD drives

by Mitch Tulloch [Published on 16 March 2011 / Last Updated on 25 Jan. 2010]

How you can prevent users from writing to writable CD/DVD on their computers.

Let's say your company's security policy does not allow users to write to CD/DVD media using their computers. Then you order 200 laptops for your users and you find out that the vendor only supplies these laptops with writable CD/DVD drives in them. What can you do?

Provided the laptops are running Windows Vista or later, you can prevent your users from writing to the writable CD/DVD on their new laptops by enabling the following Group Policy policy setting for these computers:

Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access\CD and DVD: Deny Write Access

Then regardless of what type of CD/DVD burning software they install on their laptops, they won't be able to write to writable CD/DVD media.

If you have feedback concerning this tip, please email me. And be sure to check out my website!

See Also

The Author — Mitch Tulloch

Mitch Tulloch is a well-known expert on Windows Server administration and cloud computing technologies. He has published over a thousand articles on information technology topics and has written, contributed to or been series editor for over 50 books.

Featured Links