An open-source command line utility for *nix that lets you manipulate a Windows Active Directory. You can create and manipulate accounts and groups, modify attributes, and more.
Microsoft's KB entry on using Group Policy to disable removable media on AD member machines.