SecureWave's latest version of Sanctuary Device Control 3.0.1 enforces company policy toward equipment and intellectual property by giving security managers granular control over employee usage of hardware devices including local hard drives, removable media, network adapters, printers, and scanners. The product lets managers create both general and specific rules for controlling device usage. The Sanctuary Application server can manage up to 5,000 Sanctuary clients, each of which are installed on each managed system. Administrators can use the product for controlling data export to removable media without the enforcement of a complete ban. They can also review an image of all data copied to removable media via shadow-copying. While this may not stop data theft, it acts as a deterrent and can help in investigating data leaks. A byte limit can also be placed on what users can export to removable devices. One of Sanctuary Device Control's most significant features is its Media Authorizer, which lets administrators grant specific permissions on removable data on a user-level basis. The product boasts straightforward installation, with wizard-based installers and HTML documentation guiding the process. Navigation is easier in this version due to the dropping of the product's proprietary structure in favor of standard Windows PnP organization, which makes locating devices in the hierarchy easier.