You can do this with several ways but you need to make sure it is effective
and secure enough to do the job in question!
You can create a GPO and set groups to be allowed to have access to the
Hardware(devices) such as USB/CD/DVD..etc or be denied access to one or all
of these removable storage if you are worry about Data theft or the like!!!