I have setup a user policy using the windows 2000 group policy features,
and have enabled "hide drives a and b from windows explorer" and
"prevent access to a: and b: from windows explorer".

First we discovered that these do not effect the command prompt, so we
also enabled the system policy to prevent cmd.exe ... but still allow
batch processing.

BUT ... if there is a floppy disk in the floppy drive, users can go
start .. run .. a: and get to the floppy. Also, if there is a floppy in
the drive users can right=click a file and choose "send to a:"

Any ideas how to prevent access to the floppy more completley? We cannot
get rid of the run line ... support uses it too heavily.