Block USB Storage Devices Using Group Policy

USB storage devices are one of the most common sources of data leakage and malware infections. If removable storage is not required for business operations, it should be disabled through Group Policy.

Implementation Steps

• Open Group Policy Management and create or edit a GPO.
• Navigate to Computer Configuration → Policies → Administrative Templates → System → Removable Storage Access.
• Enable All Removable Storage classes: Deny all access to block all removable storage devices.
• Alternatively, enable Removable Disks: Deny read access and Removable Disks: Deny write access if read/write control is preferred.
• Apply the GPO to the required Organizational Units (OUs).
• Run gpupdate /force or wait for Group Policy refresh.
• Verify that USB storage devices are no longer accessible on client computers.

If specific users require USB access, place them in a separate OU or apply exceptions using security filtering.