Block copying to USB - using DLP 14.6

Hi All

Can someone the is a DLP expert please provide the steps to create and assign a policy to block writing to USB drives - but still allow read-only access - and only assign it to a group of machines that can be modified

Thanks in advance