Vista lets you place restrictions on hardware devices to protect against data theft. You can place restrictions on device installation, limit access to devices already installed and control Autoplay settings for removable devices.
Data theft can occur through the installation of hardware such as removable storage devices. For example, an attacker can install a removable device on your computer with the intent of copying your data to it.
Vista protects against this type of data theft through device installation restrictions. You can control the installation of devices through the local computer policy (or a group policy). You can find these settings in the following container:
Computer Configuration \ Administrative Templates \ System \ Device Installation \ Device Installation Restrictions.