"Block copy and execution of specific files from an USB." This configuration may work for CD/DVD drives as well. http://service1.symantec.com/support/ent-security.nsf/854fa02b4f5013678825731a007d06af/23f11304c8b02aa6802575f20010a97e?OpenDocument Thomas