restrict limited user account

Hi

i want to restrict limited user to get access of cdrom,usb drive
but same time allow adminisrator to access cdrom n usb drive

is it possible?
if so plz tell me how ?

Pallavi