So you're saying that you don't have a single machine in the building (or buildings) that has a floppy, cd-rom, or other removable drive (ie. USB thumbdrive)? Your users can't map or address network shares?
Exactly. They have only the software I load. They are there to work.