How to block usb and CD in window server 2012?

if we want to block Usb and Cd in window server please follow the section below:

1. go to GPO and find Group policy objects and then create new policy by right click and click new after put name of GPO(Block usb and CD)
2. Then right click on new GPO that we just create for click edit
3. find User configuration--->administrative templates-->system-->Remove Storage Access
4. Then we will found some setting in the right size

• CD and DVD deny read access
• CD and DVD deny write access
• Removable Disk:Deny read access
• Removable Disk:Deny write access
• All removable Storage classes :Deny all access

Enable all setting above  and then save.
and then run gpupdate /force