Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual page 86

Floppy Drive: Controls all devices listed under Floppy disk drives in Windows Device
Manager.
Preferred Devices: Allows only Removable Storage devices included in the Preferred Devices
list. All other devices reporting as removable storage are not allowed. For information about
adding preferred devices, see
AutoPlay: Controls the Windows AutoPlay feature. AutoPlay performs two processes. First, it
launches the AutoRun process, which looks for an autorun.inf in the root directory and
executes the instructions in the file. Second, it looks for specific content (music, video, and
pictures) and launches the appropriate application to display or play the content. Select one of
the following options:
Allow AutoPlay: Allows the AutoPlay feature, including AutoRun.
Block AutoPlay: Blocks the AutoPlay feature, including AutoRun.
Block AutoRun: Blocks the AutoRun feature so that autorun.inf instructions are not
executed. Launching of applications for music, video and pictures is not blocked.
Fixed storage (hard disk drives) and network drives (when available) are always allowed.
To set the policy default for a category, select from the following options:
Allow All Access: The device type is allowed by default.
Disable All Access: The device type is disallowed. When users attempt to access files on a
defined storage device, they receive an error message from the operating system, or the
application attempting to access the local storage device, that the action has failed
Read-Only Access: The device type is set as Read-Only. When users attempt to write to the
device, they receive an error message from the operating system, or the application attempting
to access the local storage device, that the action has failed
NOTE: If you want to disable CD-ROM drives or floppy drives on a group of endpoints or set them
as Read-Only, the Local Security Settings (passed down through a directory service group policy
object) must have both Devices: Restrict CD-ROM access to locally logged-on user only and
Devices: Restrict floppy access to locally logged-on user only set as Disabled. To verify this, open
either the group policy object, or open Administrative Tools on a machine. Look in Local Security
Settings - Security Options and verify both devices are disabled (see
default.
86 ZENworks Endpoint Security Management Administration Guide
"Preferred Devices" on page 87.
Figure 6-10). Disabled is the