Let's say your company's security policy does not allow users to write to CD/DVD media using their computers. Then you order 200 laptops for your users and you find out that the vendor only supplies these laptops with writable CD/DVD drives in them. What can you do?
Provided the laptops are running Windows Vista or later, you can prevent your users from writing to the writable CD/DVD on their new laptops by enabling the following Group Policy policy setting for these computers:
Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access\CD and DVD: Deny Write Access
Then regardless of what type of CD/DVD burning software they install on their laptops, they won't be able to write to writable CD/DVD media.
If you have feedback concerning this tip, please email me. And be sure to check out my website!