I have been asked to prevent all USB disks with the exception of issued ones that are encrypted. I have searched and found some places that mention adding exceptions to a GPO block for a specific vendor of drive. This should work well for us but I am new to GPO and there is no clear instructions on installing the GPO and the exception to limit the usage by manufacturer. Any help would be appreciated. Thank you in advance.