The Group Policy Editor offers several device-related policies. To see them, open the Group Policy Editor (select Start, type gpedit.msc,
and press Enter) and select Local Computer Policy, Computer
Configuration, Windows Settings, Security Settings, Local Policies,
Security Options. Here are the policies in the Devices category:
Allow Undock Without Having to Log On—
When this policy is enabled, users can undock a notebook computer
without having to log on to Windows 7. (That is, they can undock the
computer by pressing the docking station’s eject button.) If you want to
restrict who can do this, disable this policy. Tip
To control who can
undock the computer, display Local Computer Policy, Computer
Configuration, Windows Settings, Security Settings, Local Policies, User
Rights Assignment. Use the Remove Computer from Docking Station policy
to assign the users or groups who have this right.
Allowed to Format and Eject Removable Media— Use this policy to determine the groups allowed to format floppy disks and eject CDs and other removable media. Prevent Users from Installing Printer Drivers—
Enable this policy to prevent users from installing a network printer.
Note that this doesn’t affect the installation of a local printer. Restrict CD-ROM Access to Locally—
Enable this policy to prevent network users from operating the
computer’s CD-ROM or DVD drive at the same time as a local user. If no
local user is accessing the drive, the network user can access it. Restrict Floppy Access to Locally—
Enable this policy to prevent network users from operating the
computer’s floppy drive at the same time as a local user. If no local
user is accessing the drive, the network user can access it.
|
