Compliance Feasability

Hi all,

I'm currently working on some compliance settings in my SCCM 2012 R2 infrastructure. I would like to check if it's possible to create Compliance baselines including the following points :
- Disabled boot from USB, CD ....
- Access to BIOS is protected by a password
- Antivirus is up to date
- "Run" dialog box is disabled
- Partition D: is hidden
- Access to C: is disabled 

Thank you in advance