Link to home
Start Free TrialLog in
Avatar of litmic
litmicFlag for Hong Kong

asked on

How to disable the DVD writer burning function?

Will purchase and deploy around 300 new pc to office, however the supplier told me that there's no CD/DVD reader(read only) in the market. Is that right? However, I'd like to have the pc come with CD/DVD read only function in my office environment for security concern. How can I archive the purpose "easily"? By bios setting, window server DC group policy....? Besides, default is disable the burning function, but wanna enable the burning function  easily once need

The server is windows server 2003, around 300 client pc are windows 7
ASKER CERTIFIED SOLUTION
Avatar of Kyle Abrahams, PMP
Kyle Abrahams, PMP
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of litmic

ASKER

Thanks, Kyle Abrahams.

How to disable burning function if come with DVD writer?
Avatar of magarity
magarity

Some people don't have a choice where their corporate policy requires them to order parts.

This is easily disabled in group policy.  run the group policy editor (gpedit.msc from the start > run) and navigate along this path: User Configuration\Administrative Templates\Windows Components\Windows Explorer.  there will be an entry in this section for something like "disable cd burning feature". turn it on to disable and save.

If your user has an administrator account they can turn this back on so make sure they are just a regular user type.
PS - that same setting is in the global policy you can set at the server for all users so you don't have to go around to all the PC's.
That's not the GPO I'd recommend. Rather google for removable media restrictions, there are GPOs that allow reading only, not writing. On a 2003 server, you need RSAT to set these.
removable media like usb sticks is another problem. the question here is specific to disable dvd burning. besides, its much safer to set this and use the removable media gpo's also, not instead of.
What your policy does is disable the burning function in explorer (other burning programs would continue to work). What mine does is disable burning altogether (other burning programs would stop working).
My policy:
CD and DVD: Deny write access http://msdn.microsoft.com/en-us/library/bb530324.aspx#grouppolicydeviceinstall_topic3c
disable dvd burning. << in any windows there is a built in burner, windows 7 has the DVD maker
windows media player has a built in cd burner.
Other media players also have that built in.
What I would do is also include> disable the Auto play functions,
In Windows Vista and Windows 7 the Autorun feature is a part of Autoplay feature and the default action is to prompt the user whether autorun command is to be run.
Windows XP Professional, Windows Server 2003,and Windows 2000
To completely disable Autoplay/Autorun features follow the bellow procedure:
How to disable Autoplay and Autorun features in windows
http://www.wintips.org/how-to-disable-autoplay-and-autorun-features-in-windows/