Shenan,
Well, generically, the OS looks at USB, CD and Floppy and removable
media. So in essence, these media devices share common system functions
under that umbrella.

Similarly, the function of "write" to is a common function regardless
of
which application issues the 'save' or 'copy' command.

A the system level there is likely not more that a handful of actual
system calls which are used to accomplish this 'write to removable'
function.

While I have not been able to find the specific call references in the
Developers documentation, I am fairly confident that these calls are
present and can be monitored at the system level as evidenced by a
number of third party products that accomplish this very task. I figure
if they can be monitored and managed by third party tools, there is
likely a MS switch in XP that will allow me to run something like MDM
or debug mode to pick these activities up.

As far as 'ways around it', I'm not building Fort Knox, but I would
guess if we get this to the lowest OS level, it is unlikely that most
developers will go to the trouble of re-writing basic system calls and
device drivers to circumvent some obscure monitor that might be
implemented.

SG