Hope they get a fix on this soon. . Although USB is the most common means to transfer files today, The culprits might know the loop hole and start copying files from the CD where it is not logged for ownership.

There is no need to fix this as This is an ativirus product not a group policy management server.

As I recall from my initial testing, SEP would block CD writing if the Windows CD burning routines were used.  It did not block CD burning from the third-party software that is being bundled with many PC's such as easy cd creator.  You could probably address this with the application control functions.  There are other non-symantec device control applications that do a better job of this and work with 64-bit OS's.  These device control programs also try to keep up with newer versions of CD/DVD writing programs as they are released. This is an area that needs to be improved.

Another option, although not necessarily one that seems practical in my opinion, is to have device control block all 3rd party burning application ie)Nero, Easy Cd Creator ex. Then you can use Windows to Widows security policy to block Windows from burning to CD/DVD drives. This effectively is stopping all burning to any cd drives, no? Well like I said maybe not the most practical solution, but since optical drives use unique drivers and API's it is very difficult to block access to them. Hopefully sometime in the future.

Cheers
Grant

@Grant_Hall: that is what we are doing to prevent CD burning...
just sometimes we need to be vigilant if the clients would use another 3rd party apps...
it might be a long list...
thanks.