I need to turn off the use of USB, floppies, access to CD-ROMS (including buring), installing software, etc. unless the user has Administrative Access, for expample IT Staff. I asssume I should use a Policy in AD but I have never do this before.
Windows 2003 AD
Windows 2008 DC - Installed my first one
Machines are Windows XP, and soon some Vista.
Thanks in Advance