Hi Dom,
I think your best bet is to configure a device control policy. Check chapter 32 of the admin guide. You can create a device control policy to block write attempts to a CD/DVD device.
Incidentally, your post landed in the Endpoint Management forum.
Cheers
Ben