Question came. #How to disable USB Drive but USB headphones/Keyboard/Mouse and Data cards should work? Simple: When administrator says how he will block things using GPO what we do is we edit Group Policy Management template. #Group Policy Management Editor Following option need to be configure. What exactly happens? As we know Windows is all about registry and for each and everything we had one Reg file same thing applies to USB. For example USB Printer, USB hub, USB headphones for each component we had different registry keys. Now I just want to disable USB storage hence will concentrate on following registry path. #[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR] and mainly START (Dword) By default it is 3 if you modify registry to 4. USB Mass storage will be block. (Cell Phones, Jump drives, Disk and Pen drives will not detect in OS.