What is the best way for me to achieve the following

1. Disable CD-ROM, Floppy & USB on client computers
2. Stop users from copying files from the file server to
there local disks

I would like this policy to work only when users are
actually logged onto the server, also some of my users
have laptops and will need use of CD-Rom etc when they are
out the office.

Thanks In Advance!

Simon