Hi folks, I'd love to be able to do this with a GPO, but these are for machines who won't be connecting to Active Directory. I've managed to disable USB Storage access by omitting everyone but Admins from usbstor.inf and usbstor.pnf. The laptop has an SD Card slot. Is there a way to disable this at a local level? I could log as Admin then delete the driver, but Plug n play would only re-install it again after a reboot? I'm waiting on confirmation from the Net Admin about disabling access to the DVD drawer as well. Basically these laptops are being used as a temporary device for presentations. The users log-in through their Citrix session and access their presentation files from their Network drive. Going forward we'll be using iPads. Cheers, Barry. Barry Toner ICT Assistant ICT Department Clanmil Housing Northern Whig House 3 Waring Street Belfast BT1 2DX Tel: 02890 876000 Fax: 02890 876001