How to disable USB port device from Windows domain environment

Let's take a closer look at the Windows recognition USB device mainly through two files, one is Usbstor.pnf, the other is Usbstor.inf, when the first time the computer uses the USB device to disable these two files can achieve our goal.
1, open Active Directory users and computers;
2, select the OU need to disable the USB device, and click the right mouse button to group policy;
3, create a GPO for USB, and click Edit to open Group Policy Editor;
4, enter the Group Policy Editor, expand "Computer Configuration", "Windows Settings", "Security Settings", "Security System", "File System";
5 Right click on “Add File", pop up “add files and folders", enter “%systemroot%\\inf\\usbstor.inf“ in the "folders" column, OK; the article you see From Active Directory
6, in the "Database Security Settings", delete all users, and add "Everyone", remove the default Allow “Read & Execute”,“ List Folder Contents ”,"Read”, add rejection < complete control>; application, OK;