I created a group policy that has both computer config and user config. For Computer I disabled CD/DVD, USB. That part is working. If I put in a CD/DVD I get access is denied. The GPO is attached to Laptops-ENCRYPT in the Computers OU. I enabled it so no one can go into the Control Panel. I logged in and the control panel opens. Security Filtering is Authenticated Users.