i tried created a gpo that can block removable drive to every client that connect to domain. at first it works well, then i try to make it only affect to some users .. so i created a group with some user that won't be allowed to use removable disk on their pc.
i put that group in security...