Enable the "Disable dvd/CD rom access" policy on your main policy
Create a policy Called "Allow CD rom" Set the Disable CD rom access policies to disable. Enforce the Policy adn filter it so that it only applies to the users in the group this will work i have done it on mine.
Microsoft is conducting an online survey to understand your opinion of the Technet Web site. If you choose to participate, the online survey will be presented to you when you leave the Technet Web site.