On a standalone XP box, can a policy or profile be created that would prevent a user or group from having access to the cd and a drive? How is this done and does it matter XP home or pro?