Vista lets you place restrictions on hardware devices to protect against data theft. You can place restrictions on device installation, limit access to devices already installed and control Autoplay settings for removable devices.

Data theft can occur through the installation of hardware such as removable storage devices. For example, an attacker can install a removable device on your computer with the intent of copying your data to it.

Vista protects against this type of data theft through device installation restrictions. You can control the installation of devices through the local computer policy (or a group policy). You can find these settings in the following container:

Computer Configuration \ Administrative Templates \ System \ Device Installation \ Device Installation Restrictions.

Still on the topic of Device Control, Vista also lets you control the type of access users have to devices already installed. You can find the related settings in the following policy container:

Computer Configuration \ Administrative Templates \ System \ Removable Storage Access.

Last, Vista lets you control Autoplay and Autorun settings for any removable storage devices. You can find these settings in the following policy container:

Computer Configuration \ Administrative Templates \ Windows Components \ AutoPlay Policies.