By default you cant do this in your Windows server 2003 based domain.
I found Microsoft article that will help you build custom group policy ADM templates and restrict access to USB, CD-ROM, Floppy Disk and LS-120 drivers.
Read it here
Enjoy
In this post i`ll show one of many ways how to connect your users to shared printer. For that open notepad in Windows server 2003 or Windows XP and type:
REM Add Printers
RunDll32.EXE printui.dll,PrintUIEntry /in /n \\sever\printername1
RunDll32.EXE printui.dll,PrintUIEntry /in /n \\sever\printername2
REM Set Default Printer
RunDll32.EXE printui.dll,PrintUIEntry /y /n \\server\printername2
EXIT
For example i have two shared printers on server named “Fileserver” and these printers are shared as “HPLJ1″ and “HPLJ2″. Also i want “HPLJ1″ as default printer for all users. I will type :
REM Add Printers
RunDll32.EXE printui.dll,PrintUIEntry /in /n \\Fileserver\HPLJ1
RunDll32.EXE printui.dll,PrintUIEntry /in /n \\Fileserver\HPLH2
REM Set Default Printer
RunDll32.EXE printui.dll,PrintUIEntry /y /n \\Fileserver\HPLJ1
EXIT
Save this file as Addprinter.bat and place it as login script via group policy or you can deploy it to your users in any other way you prefer.
As you know, by default, group policy is being refreshed every 90 min + random time up to 30 min on domain members. And this refresh will occur only if group policy settings were modified. In addition, every 960 min, security settings are being refreshed regardless of whether any changes to group policy were made. This post will show you how to modify time value for security settings refresh on you Windows server 2003 or Windows XP machine. To modify open registry editor and navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}
Double click on “MaxNoGPOListChangesInterval”, change base to Decimal and enter your new Data value in minutes.
This post will show you how to view Resultant Set of Policy information with gpresult command. To view policy information for user named “Testuser” open command line on your Windows server 2008 and type:
gpresult /user Testuser
If you want to see only computer related policy settings type:
gpresult /user Testuser /scope computer
If you want to list policy information on remote server named “Testserver” type:
gpresult /s Testserver /user Testuser /scope computer
More gpresult usage examples can be found here .