Restrict plug and play

Plug and Play is convenient, but it can sometimes be dangerous: if someone connects a USB stick, MP3 player, or external hard disk drive to a notebook, it is recognized automatically – and it is then easy to start exporting data and passing it on to the wrong people. The alternative is to lock the computer, so all memory media except for the company's own memory sticks cannot be used to run or read programs. This also removes the danger of accidentally loading a worm or virus on your own hard disk if you lend the data medium to someone and get it back with a "dangerous cargo." In addition, you should only use sensitive data on USB sticks when it is encrypted, as the smaller the memory device, the greater the danger that it will get lost or stolen.