Prevent use of writable CD/DVD drives

by Mitch Tulloch [Published on 16 March 2011 / Last Updated on 25 Jan. 2010]

How you can prevent users from writing to writable CD/DVD on their computers.

Let's say your company's security policy does not allow users to write to CD/DVD media using their computers. Then you order 200 laptops for your users and you find out that the vendor only supplies these laptops with writable CD/DVD drives in them. What can you do?

Provided the laptops are running Windows Vista or later, you can prevent your users from writing to the writable CD/DVD on their new laptops by enabling the following Group Policy policy setting for these computers:

Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access\CD and DVD: Deny Write Access

Then regardless of what type of CD/DVD burning software they install on their laptops, they won't be able to write to writable CD/DVD media.

If you have feedback concerning this tip, please email me. And be sure to check out my website!

The Author — Mitch Tulloch

Mitch Tulloch is a widely recognized expert on Windows administration, networking, and security. He has been repeatedly awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy and use Microsoft platforms, products and solutions. Mitch has published over two hundred articles on different IT websites and magazines, and he has written or contributed to almost two dozen books and is lead author for the Windows 7 Resource Kit from Microsoft Press. For more information, see www.mtit.com .

Latest Contributions

Featured Links