Block USB.

This post details how to block USB mass storage devices within Microsoft Endpoint Manager.