Endpoint Protection

Hi all , I am trying to achieve the following would greatly appreciate if you can help me out with it.

1) Is there a way via which we can make the CD/DVDs read only meaning users cannot write anything to the DVDs nor they can execute anything from DVDs in the same way we do for making USBs read only.

2) Currently I cannot make USBs ready only meaning I cannot prevent users from copying files from their USBs to desktop but I can stop them from writing to USBs.

Could you help me out ? Thanks

There is a workaround to make CD/DVD read-only:

How to block CD/DVD Writing in Windows 7

You can make USBs read-only:

How to make USB drives read-only with Symantec Endpoint Protection using Application and Device Control

Also, there is already a default rule in place within the policy, just enable it:

Thanks Brian already tried that. Even if I make the devices read only users can still copy files from USB to desktop but not from Desktop to USB . Goal here is preventing them from copying data from USB to desktop keeping into consideration that will still see the content of USB but would not be able to do copy/paste.

Well it will only prevent some specific burners from writing to CD I was looking for a more global behavior to do the blocking.

Are you using this in your envoirement ?

Thanks 

The rule only blocks writing to USB, not the reverse. You need a true DLP product.

For CD/DVD, your only option is the workaround.

In very specific situations.

Yeah We dont have DLP in envoirement so I think we are out of luck here !