I have domain 2008 with gpo define.
I 3 levels of permission that i need to do.
The most problematic is the operator.
I need to disabled the USB & hide the CDrom drive(Defined E) & Drive C.
I need the solution via GPO only.
One more thing, If the Operator will log off the user all restrictions need to be removed.