Locking USB key sticks or drives from a desktop user

[Az]

Hi, I am exploring options that will prevent my desktop users from inserting
a USB key and either copying files to the drive, or removing files from the
drive. And while searching them for USBs sticks might be fun , I am hoping
there are other options.

Is there a way to lock down the USB ports for a person who logs on as a
desktop user, yet still allow full access for the administrator?

Here is what I tried:

1) I created a brand new user on the server to test things out. I removed
every check from the "user Privileges" tab. I used the gui to create the new
user.

2) Log in with the user and plugged in a 250G Simple USB external hard and
had full access to it. I could see all files, read from it, create files,
etc.


Any thoughts on if there is a way to shutdown a USB drive?


Thanks,