safely remove hardware

users in my domain (AD)server 2003,and winxp pro for clients cannot click on “safely remove” icon on the bottom right corner.it always displays the message “you don’t have permission”.I believe I must do some tweaks in GP but I have no idea how to go about.any idea out there?