1. Open the Group Policy Management Console (gpmc.msc) and create a new GPO linked to the OU where your servers are located. Name it "Disable USB Access".
2. Edit the GPO and go to
Computer Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access.
3. In this section, you will find several policies that allow you to control access to different types of removable storage devices, such as CD/DVDs, floppy disks, tapes, etc. To disable USB drives, enable the policy "Removable Disks: Deny read access" and "Removable Disks: Deny write access".
4. Close the GPO editor and wait for the policy to be applied on your servers. You can force a policy update by running gpupdate /force on the servers or by restarting them.
5. To verify that the policy is working, try to connect a USB drive to one of your servers and see if you can access it. You should get an error message saying, "Access is denied".
