Networking World

Go to the Group Policy Editor Start → Run → gpedit.msc by typing in Run

1-Navigate to Computer Configuration → Administrative Templates → System → Device Installation → Device Installation Restrictions.
2-Double click and enable the setting "Prevent installation of devices not described by other policy settings".
3-To allow administrators to install devices and update drivers, double click and enable the setting "Allow administrators to override Device Installation Restrictions"
4-Navigate to Computer Configuration → Administrative Templates → System → Removable Storage Access.Double click and enable, "Removable Disks: Deny Read Access" and "Removable Disks: Deny Write Access".