Regarding point 2:

Managing different levels of control for large companies can be a real headache for systems administrators. The endpoint security software that we use was designed to work with Active Directory and provides a much more flexible way of controlling access to portable devices. This makes it easy to create read/write policies.

What we use is excellent software developed by GFI: Endpoint Security

Re: Five ways to prevent data theft by iPod.