From Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access.
Then Right click on the setting All Removable Storage classes: Deny all access and click Edit.
Click Enabled and click Apply and then OK.
Then link the GPO to the OU containing the computer accounts for which the USB devices are to be blocked.
Right click on the OU and click Link an Existing GPO.
Leave A Comment?