How to block USB in Windows Server 2019 and usb access permission specific users?

[jesusMT]

Thank you for your answers.

 

[Neemobeer]

Create two GPOs one set to deny read and write for removable media.
Create a second GPO that applies after the deny all that is targeted to a AD group and make sure the GPO settings are User config and not computer config.

 

[ussnorway]

if we assume these users are remote then yes but a local user can just bypass the GPO if they can actually use the port itself

 

[cedricworth25]

Thanks for answers!