You need to deny one user access to removable devices on the computer

You have a computer that runs Windows 7.
Multiple users log on to the computer.
You need to deny one user access to removable devices on the computer. All other users must have
access to the removable drives.
What should you do?

A.
From the local Group Policy, modify an application control policy.

B.
From Control Panel, modify the BitLocker Drive Encryption settings.

C.
From Device Manager, modify the settings of all removable devices.

D.
From the local Group Policy, modify a removable storage access policy.