Setup Restrictions in XP Pro PC and Config Share

I am working on a small peer network. There are a total of 5 PC's. One is a an Actual Dell Workstation. A very large machine which runs XP Pro SP-3 and acts as the server.

The other 4 PC's have XP or Vista and comprise the rest of the workgroup. Everything is working but the owner wants a couple of restrictions to occur and that is why I am here.

#1 He wants to block others from using external USB devices like Flash Drives, Discs, etc and the CD/DVD Burner. This is a new car rental business and he does not want anyone to be able to copy files from the rental programs, documents or Quickbooks and take it home with them.

I know there are some regedits or policies that can do this. I know there is also a software that can help achieve this. My question is if there is a way to implement this but with password protection?

Since I provide IT help and he himself may need to access the machine, I don't want to lock him or I out but everyone else yes. Please advise when possible.

#2 He wants me to create a hidden share on the server that only he can access and he wants it to be password protected. He will backup his own files there without anyone knowing. I have tried the built in tools of XP to do this but not that great. I have seen some programs that can do this better and need some advice here also.

I must mention that only 2 shares will be made on this machine. One will be public (My Documents) where they can dump files in there and share them. The other is the hidden mentioned above. I assume a hidden share will not be seen over the network right?

#3 I don't know if this is possible but he does not want the QB company file to be emailed. Is there some way to prevent that? I would not be surprised if not possible.

Thanks for the help,

Mike

 

Yes I have read that before. Problem is group is no good for me.

I also need to restrict CD-ROM. There has to be a program out there that can do all in one swoop..


Mike