Jump Drives

As Administrators, how do you deny a user the ability of adding a jump drive at a workstaion? The ability to add a jump drive could posse a seriuos security problem.

I have set laod and unload devices in group policy to administrators only without success. Any help would appreciated