Running Win 7 in 2008 domain.
Scenario - deny read and write to any usb unless it has encryption enabled.
I can set up GPO so bitlocker can be enabled by admins. And users can read and write to USB devices but unable to stop the use of non encrypted devices.
any ideas