The scenario: a user connects a MiFi device to a computer on the Windows Domain network to charge it. This MiFi acted as a network interface and the computer's network traffic started going out through the MiFi.
This is obviously not wanted as this bypasses our network security.
How can I prevent such a situation to occur (other than telling users to not do that... since they do it anyway).
Ideally, users would not be permitted to connect any new network devices (could be MiFi, a 3/4G USB dongle, even a USB-Network adapter). It should require an Administrator logon. But USB storage devices should still work (I have policies in place for some users to get Read/Write and some Read-only).