Prevent use of USB flash drives with WIndows 7

I have a standalone Windows 7 Professional machine and need to prevent users from copying data from it.  

It is used on a Standard user login, and I have an Administrator login for it.

How can I prevent USB flash drives from being used on the machine?

Is it possible to prevent CDs/DVDs from being burned?
LVL 11
Who is Participating?
Run5kConnect With a Mentor Commented:
You can actually set a local group policy that will configure this a bit more gracefully than a manual registry edit:

Computer Configuration -> Administrative Templates -> System -> Removable Storage Access

You can potentially enable All Removable Storage classes: Deny all access, or if you want to retain a bit of flexibility, enable Removable Disks: Deny write access.
R. Andrew KoffronCommented:
this might help.
be careful it's an old article.
Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

To block your computer's ability to use USB Removable Disks follow these steps:

1.Open Registry Editor.
2.In Registry Editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR1.Locate the following value (DWORD):
Start and give it a value of 4. Note: As always, before making changes to your registry you should always make sure you have a valid backup. In cases where you're supposed to delete or modify keys or values from the registry it is possible to first export that key or value(s) to a .REG file before performing the changes.

1.Close Registry Editor. You do not need to reboot the computer for changes to apply
PowerEdgeTechConnect With a Mentor IT ConsultantCommented:
You can block all access to removable media (CD, USB, etc.) using local policies ...

Start, type in gpedit.msc, then:
Computer Configuration (or Users Configuration), Windows Settings, Administrative Templates, System, Removable Storage Access
R. Andrew KoffronCommented:
here's an article on how to do it in server 2008 I don't have access to a windows 7 machine right now to test if it's compatible but will try it soon.
R. Andrew KoffronConnect With a Mentor Commented:
just tested Run5k's and it's a much better method than the previous articles.

PowerEdgeTech's tech is the same with a minor mistake in the gp path just remove "(or Users Configuration), Windows Settings"
PowerEdgeTechConnect With a Mentor IT ConsultantCommented:
(or Users Configuration) was there on purpose, as an optional course.  If you follow the same path under Users Configuration, you can set the policies per user rather than global per machine.  Probably not helpful on a single machine, but if implementing in a Domain environment, Users Configuration will allow you to block/allow access per user group rather than the entire machine, just in case there are individuals (like administrators) who should retain access.  But yes, I forgot to remove 'Windows Settings'.
Run5kConnect With a Mentor Commented:
To expand upon PowerEdgeTech's good advice, if you want to configure local group policies that only affect non-administrators that is certainly possible, but it requires a few extra configuration steps:

How to Apply Local Group Policies to All Users Except Administrators

Explore the benefits of the Multiple Local Group Policy feature in Windows 7
All Courses

From novice to tech pro — start learning today.