Disable USB and DVD via GPO (Group Policy)
So unless you already have delegated privileges, you will need Domain Admin access to enable or create group policies.
- Open Group Policy Management Editor.
- Create a New Group Policy Object
- Name it Disable USB and DVD GPO
- Navigate to User Configuration .... Policies .... Administrative Templates .... System ..... Removable Storage Access.
Here you can configure DVD only or Tap, WPD or all Removable storage devices.
we will prevent users from accessing any Removable Devices.
so open all Removable Storage classes: Deny all access
select enabled.