Hiding system drives C, D, floppy if there is still one and CDRom seems to be easy but I saw many many time at some customer’s place administrator unable to complete this simple operation. The reason is in most of the case, the administrator doesn’t really know how to manage GPO and what is difference between user and machine GPOs.
First you need to know there is a built-in GPO in Microsoft Windows 2003 / 2008 / R2 with these settings ready to be set.
To set it up, you need to create a new GPO or edit an existing one and find these two GPO bellow as follow :
