Hi,
I created a group policy "block USB disk access", applied it to the domain and it worked properly. After that I removed the "Apply policy" from authenticated users and created a user security group and added it under policy delegation with read and apply policy permissions. It is not applied to a user that belongs to this security group. Group policy results shows "Access denied (Security filtering)" for the specific policy. What's wrong with the settings?