Using Group Policy on Windows it is possible to block execute, read, and write operations related to a CD/DVD drive.In the Group Policy Editor, navigate to:Computer Configuration -> Administrative Templates -> System -> Removable Storage Access Open the following policies and set them all to Enabled:CD and DVD: Deny execute access,CD and DVD: Deny read access,CD and DVD: Deny write access

Using Group Policy on Windows it is possible to block execute, read, and write operations related to a floppy disk.In the Group Policy Editor, navigate to:Computer Configuration -> Administrative Templates -> System -> Removable Storage Access Open the following policies and set them all to Enabled:Floppy Drives: Deny execute accessFloppy Drives: Deny read accessFloppy Drives: Deny write access

Using Group Policy on Windows it is possible to block execute, read, and write operations related to a removeable disk, such as an SD card or USB mass storage devices.In the Group Policy Editor, navigate to:Computer Configuration -> Administrative Templates -> System -> Removable Storage Access Open the following policies and set them all to Enabled:Removeable Disk: Deny execute accessRemoveable Disk: Deny read accessRemoveable Disk: Deny write access

With Group Policy it is possible to enable object access auditing in regards to removeable storage events. Go to Computer Configuration -> Windows Settings -> Security Settings -> Advanced Audit Policy Configuration -> Audit Policies -> Object Access.Double click Audit Removable Storage and check both Success and Failures Monitor Event ID 4663 (An attempt was made to access an object) and/or 4656 (A handle to an object was requested). This can be used to detect events where a user account is attempting to use removable storage devices on a system.