https://blog.it-kb.ru/2011/10/14/gpp-group-policy-preferences-how-to-disable-usb-wpd-cd-floppy-disk-removable-devices-and-deny-read-write-access/