How to Prevent Users from Connecting to a USB Storage Device by Group Policy

To prevent users from connecting to USB storage devices by group policy

If a USB storage device is already installed on the computer:

Click Start – All programs - Administrative Tools – Group Policy Management.
Create or Edit Group Policy Objects
Expand Computer Configuration – Preferences – Windows Settings.
Right click Registry – New – Registry Item.
General Tab.
Action : Update
Hive : HKEY_LOCAL_MACHINE
Key path : SYSTEM\CurrentControlSet\Services\UsbStor
Value name : Start
Value type : REG_DWORD
Value data : 00000004
Notes: You can apply this method on User Configration too.

f a USB storage device is not already installed on the computer:

Click Start - All programs – Administrative Tools – Group Policy Managment.
Create or Edit Group Policy Objects
Expand Computer Configuration – Police - Windows Settings – Security Settings .
Right click File System- Add file or folder.
Browse to this file
%SystemRoot%\Inf\Usbstor.pnf
assign the user or the group and the local SYSTEM account Deny permissions.
6. Browse to this file too.

%SystemRoot%\Inf\Usbstor.inf
assign the user or the group and the local SYSTEM account Deny permissions.