Btw. fun with GPOs: when you block USB-ports via GPO so people cannot use USB-sticks, the DVD-drive gets blocked, too…