I have 2 questions for this and please help me to be able to implement it:

1. I want to apply a policy to block removable storage devices for all workstations on the system. How should I do it?

2. After blocking removable storage devices for all workstations on the system. In case there will be some workstations that are permanently exempted from using removable storage devices, how will I apply the exception policy to these machines?