Creating a Group Policy to disable USB

Create a group policy object to store the policy you wish to impose in your domain.

1. Launch the Group Policy Management tool on the domain controller
2. Right-click Group Policy Objects, click New
3. Enter a name for the GPO and click OK
4. Right-click the policy and click Edit.
   Adding Policies to the Group Policy Object
5. Group Policy Management Editor
6. Navigate to Computer ConfigurationPoliciesAdministrative TemplatesSystemRemovable Storage Access
7. Right-click on All Removable Storage classes: Deny all access, click Edit.
8. Click Enabled and click Apply and then OK
   
   Linking the Group Policy Object
9. Right-click on the OU
10. Click Link an Existing GPO
11. Select the GPO you created and click OK
    
    Updating the Group Policy
12. The last step is to update the group policy using the command line gpupdate /force.