By using Group Policy, you can block the use of data cards and USB drives on a per-machine basis. But you can't use Group Policy to do this on a per-user basis. What can you do if you need to block only certain usernames from accessing such devices on Windows 7 computers?
Check out DeviceLock, which can be integrated into Active Directory to provide additional device blocking settings that can be managed using GPOs:
Mitch Tulloch is a eight-time recipient of the Microsoft Most Valuable Professional (MVP) award and widely recognized expert on Windows administration, deployment and virtualization. For more tips by Mitch you can follow him on Twitter or friend him on Facebook.