Microsoft Vista for IT Security Professionals

ReadyBoost securely provides the speed advantage of USB flash drives as a page file on a stick for read-only, discardable data such as programs.
Device Installation Group Policy settings allow you to control which devices and device classes may be installed, either by regular users or by local administrators.
Removable Storage Group Policy settings allow you to deny read and/or write access to individual classes of removable storage devices.
For the truly paranoid, Removable Storage Group Policy settings can disable all access to all removable storage devices.
Discussion of Digital Rights Management software is generally highly controversial and usually resolves down to personal opinion.
Digital Rights Management approaches work effectively only in situations where punitive measures can be taken against content consumers when they skirt the DRM prohibitions on content use.
Windows Rights Management Server is difficult to install, and it requires many components on Windows Server 2003, plus a Client Access License for each content consumer.
Windows Rights Management Services Client is an API that is accessed by application software, each with its own user interface to present Rights Management to the user.
The Encrypting File System allows you to encrypt individual files, or all files within a folder.
Windows Vista adds support for EFS keys held on smart cards; page file encryption; offline file encryption based on the user s key; and policies to control the indexing of encrypted...