Another way that data theft can occur is through the installation of hardware such as removable storage devices. An attacker can install such a device on your computer with the intent of copying your data. Vista protects against this type of data theft through device installation restrictions.
You can control the installation of devices through the local computer policy (or a group policy if using Active Directory).
To locate the related policy settings:
- Click Start and type mmc in the Search field.
- From the list of programs, click mmc. Click Continue when prompted.
- From the File menu, click Add/Remove Snap-in.
- Click the Group Policy Object Editor from the list and click Add.
- Click Finish.
- Click OK.
Click the Local Computer Policy and navigate to the following location:
Computer Configuration Administrative Templates System Device Installation Device Installation Restrictions.
In the details pane you will find several settings to control the installation of devices on the local computer.