You can block USB mass storage devices through OS policies, it doesn't prevent everything though (people have demoed frying computers using capacitors, or using

You can block USB mass storage devices through OS policies, it doesn't prevent everything though (people have demoed frying computers using capacitors, or using USB keyboards to open the terminal and execute code)