Vista lets you place restrictions on hardware devices to protect against data theft. You can place restrictions on device installation, limit access to devices already installed and control Autoplay settings for removable devices.

Another way that data theft can occur is through the installation of hardware such as removable storage devices. For example, an attacker can install a removable device on your computer with the intent of copying your data to it.

Vista protects against this type of data theft through device installation restrictions. You can control the installation of devices through the local computer policy (or a group policy). You can find these settings in the following container:

Computer Configuration \ Administrative Templates \ System \ Device Installation \ Device Installation Restrictions

Still on the topic of Device Control, Vista also lets you control the type of access users have to devices that are already installed. You can find the related settings in the following policy container:

Computer Configuration \ Administrative Templates \ System \ removable Storage Access

Lastly, Vista lets you control Autoplay and Autorun settings for any removable storage devices. You can find these settings in the following policy container:

Computer Configuration \ Administrative Templates \ Windows Components \ AutoPlay Policies