Create and assign a group policy to the appropriate OU with this configuration:
Computer Configuration >> Administrative Templates >> System >> Removable Storage Access
Removable Disks: Deny execute access Enabled
Removable Disks: Deny read access Enabled
Removable Disks: Deny write access Enabled
Categories: