CDRW Drive ACL is ignored?

[Guest]

I have set the ACL on my CDRW drive so that a certain group of users dont have access
This works fine through the explorer and cmd interfaces - users receive an access denied
However users can still access the drive via CD Burning apps such as Roxio
Does any one know how this is possible? Is this a known security issue?

 

[Roger Abell]

The device is not actually NTFS so the Explorer is sort of
by extension doing this. The products like Roxio however
only access directly to the device driver, and so Explorer
holds no sway. Whether this is a bug or by design is something
we could likely go round and round talking to MS about, and
perhaps it is the failure of the app developer not obeying the
stated permissions (OS should not leave it up to them).
Anyway, your work-around could be to adjust the NTFS permissions
on the Roxio, or other, applications' exe files.

 

[Guest]

Thanks for your reply Roger

I have tried setting security at the device level as well via the Security value in the appropriate key for the CD Drive under HLKM\SYSTEM\CurrentControlSet\Enum.

Again access to the drive is blocked via explorer but Roxio etc still have access

Seems like a serious issue to me. Is there some way I can raise this with MS?