to disable usb drives he should rename the usbfile sys and storedrive inf files