Hello Fellas, Do you really think blocking USB is big thing? If yes let me remind you in Windows World everything is registry and if something is blocked than it has same registry to unlock it. You can block USB mass storage with Symantec End Point Protection also and it’s even more simple than Group policy few next and you are good. http://www.symantec.com/docs/TECH175220 Symantec Endpoint Protection you can block access for users to use USB Pen drives and allow usage of Keyboard and mouse. 1. In the SEPM, Under View Policies, select Application and Device Control 2. Right click the Application and Device Control Policy and select Edit. 3. Select the Device Control view. 4. Under the Blocked Devices section, click Add, select USB and click OK. (If Disk Drives isn't listed, it is already added as a Blocked Device). 5. Under Devices Excluded from Blocking, click Add. 6. Select Human Interface Devices and the devices to restrict one of its functi