Hi,

I cannot seem to be able to set it so that CD-ROM device types are read only for everyone but not blocked - so essentially can "burn" to CD/DVD - for CD-ROM in the trusted devices list. I do not want to do this via computer group as it will be an administrative burden and with 4500 devices, and most are shared devices (Healthcare) it is unworkable to manage this via computer groups.

It seems to be quite a shortfall in the whole product, you have an allow trusted devices list, but then that blocks all devices of that type that are not part of a trusted device list. We don't want to be so strict so it should be easier to set trusted devices to read and write but non trusted devices to read only.