https://www.grouppolicy.biz/2012/01/how-to-use-group-policy-to-deny-executing-writing-andor-reading-on-removable-disks/