How to: Disable USB and CD-ROM on a Windows Network Using Group Policy
By default, Windows’ Group Policy does not offer a facility to easily disable drives containing removable media, such as USB ports, CD-ROM drives, Floppy Disk drives and high capacity LS-120 floppy drives. However, Group Policy can be extended to use customised settings by applying an ADM template. The ADM template in this article allows an Administrator to disable the respective drivers of these devices, ensuring that they cannot be used. This will not allow any sort of granular controls, basically all or nothing.
Resolution
Import this administrative template into Group Policy as a .adm file