welcome evry body i go to www.windowssecurity.com to find a discussion list to send them my question but i didn't find so if possible to ask you my question it will be thoughtful of you my question is i need to make a policy from my windows 2000 server to prevent group of users from using CDROM or floppy drive my steps was as follow: i made an organization unit and put the users and also thier workstation in it then from properties----group policy then computer configuration---security setting----restrict cd rom access but still users can use their cd rom so what is the right steps to prevent them thanks