Anybody know how to create a gpo that will not allow the usbstor/port to be used for flash drives?

My DC is 2003 standard