You can use the exit point to validate users that are authorized to use ODBC. Sample program exist in the IBM information Center under this address:
As you will see, it is pretty easy to write variance into this example to fulfill your need’s.
Dont forget to register your exit program as mentionned on the doc.
Options in Windows depend on your domain configuration, as when you are in Windows Server 2003 and using Group Policy you can manage all the desktops by hiding the ODBC control panel item. Check out this Tecnet article for the steps to perform this task: How to: Hide Control Panel Tools in Windows Server 2003.
There is also the option within Operations Navigator to whom would have access to ODBC. From iSeries Navigator, right click on the system, select Application Administration. Click on Client Applications, Click on the + beside iSeries Access for Windows, this will open up the window for the application, click on ODBC and then Customize. Within here you can set who you want to give access to ODBC on that system either by User Profile or Group Profile.