Allows you to prevent access to floppy drives, CD Rom drives, removable drives, Modems, Com and LPT ports to anybody you dont want to have access to them, but to still enable authorised users (maybe technical staff) to access them when the need arises, perhaps for software installation or to resolve problems.