I am trying to see if anyone on the domain can be prevented from attaching a USB hard drive or flash drive to their machines. I dont want to disable USB as we use USB keyboards and mouse. Just out of ...

I want it to be a GPO that way if for whatever reason I can't RDP to it, I can just revert the GPO to change it back. Any ideas? I've found a million articles on how to disable use of USB storage but ...