Your role of Network Administrator at ABC.com includes the management of the Active Directory
Domain Services (AD DS) domain named ABC.com. The network includes servers that run
Windows Server 2012.
Company users use either desktop computers or portable laptop computers. All client computers
run Windows 8.
A new company security policy states that laptop users must not be able to use removable devices
on their laptops.
You configure a group policy object (GPO) and apply it to all laptops. The GPO has the “Prevent
installation of removable devices” setting applied.
You test the GPO by attempting to use a USB Flash Drive on a laptop. You are unable to use the
USB Flash Drive. However, you discover that you are able to use USB devices that you have
previously used on the laptop.
How can you ensure that users are unable to access any removable devices including previously
used removable devices on their laptops?

A.
By configuring the “Devices: Unsigned driver installation behaviour” setting in a GPO.

B.
By configuring the “Prevent installation of devices not described by other policy settings” setting
in a GPO.

C.
By configuring the “Removable Disks: Deny execute access” setting in a GPO.

D.
By configuring the “All Removable Storage Classes: Deny all access” setting in a GPO.