Block cdrom drives

Hi,

I tried creating configuration to block cdrom internal drives, I can block USB sticks but Cdrom drives can still be accessed is this normal ?