Configure a Group policy for the Domain that blocks all unsigned drivers
Do nothing, this is the default setting
Configure a Group policy for the Default Domain Controller to block all unsigned drivers
Configure the Windows 2000 file servers, Windows 2000 print servers, Windows 2000 professional computers and Windows 2000 file servers to block unsigned drivers