GFI EndPointSecurity allows network administrators to control which user can access removable drives, floppy disks and CD/DVD drives on the local machine. Without protection, anyone can easily copy a gigabyte or more of confidential data from or to the machine, using an inexpensive keychain USB drive or other storage device. GFI EndPointSecurity enables you to grant usage right for such devices only to users that were either added to the newly created group for that device type and for centralized management, you can define which users can use removable media from Active Directory by making them a member of three pre-defined groups.