DeviceLock allows network administrators to lock out unauthorized users from USB and FireWire devices, WiFi and Bluetooth adapters, CD-Rom and floppy drives, serial and parallel ports, PDAs and smartphones, local and network printers and several plug-and-play devices. Enterprises that have standardized on software and hardware-based encryption like PGP Whole Disk Encryption and TrueCrypt can centrally define and remotely control encryption policies for employees.

The optional data shadowing function captures full copies of files that are copied to authorized removable devices, Windows Mobile and Palm OS-based PDAs and smartphones, burned to CD/DVD or printed by authorized end users. Shadow copies are stored on a centralized component of an existing server and any existing ODBC-compliant SQL infrastructure of the customer's choosing.

Use cases include:

- Control which users or groups can access USB, FireWire, Infrared, COM and LPT ports; WiFi and Bluetooth adapters; any type of printer, including local, network and virtual printers; Windows Mobile and Palm OS-based PDAs and smartphones; as well as DVD/CD-ROMs, floppy drives, and other removable and Plug-and-Play devices

- Establish time and date access controls to devices

- Define which types of data (files, calendars, emails, tasks, notes, etc.) can synchronize between corporate PCs and personal mobile devices

- Detect encrypted PGP and TrueCrypt disks (USB Flash Drives and other removable media) as well as Lexar SAFE PSD encrypted flash drives and apply "encrypted" permissions to them

- Set devices to read-only mode

- Protect disks from accidental or intentional formatting

- Detect and block hardware keyloggers (USB and PS/2)

- Store shadow data on a centralized component of an existing server and any existing ODBC-compliant SQL infrastructure

Prices start at $42. Visit the DeviceLock site for more information.