Prevent the XP users (Local & Domain users) from using CD and Memory sticks

I have a domain running on Win2000 server and the users Pc’s running WIN XP.

How can I prevent a specific group or OU from using the CD Drive or memory sticks (Flash memory)?

I need to know how can I do that in case the user in login using his domain user and local user.

Prefer if I can do it using GPO or login scripts.

Thank you very much.

Haitham Seyadi
Head of Communication Section
NBB