You would have to look for it under Edit GPO, in Users and Computers, right click on the OU that the members are in are look around. I do not remember a GPO setting for CD-Rom, but that is the place to start. If not I think you would have to set local policy on the clients.

I want to implement through GPO and if i want to do the same with client policy....then i prefer to go for disable the CD-ROM from BIOS or unplugged it.

Unable to find the option as suggested by u.

Thanks

hi .....
select the OU (which contain users) for which u want to disable CD-ROM , right click-->
group policy--> edit--> computer configuration -->windows setting --> security setting -->
local policies --> security options --> device : restrict CD:ROM (PROPERTIES )--> Enable

mmc- -- > file--> aad/remove snap in --> add --> group policy object editor -->close -->
then follow the above procedure..

this will work..