How to prevent from writing into USB drive by GPO

Create a key "StorageDevicePolicies" under HKLM/System/CURRENTControlSet/Control.

then create a value DWORD key named "WriteProtect" under the Key.  Set 1 to enable the protect

Write a ADM file to apply the setting by GPO:

Class Machine

CATEGORY "System"
 
 CATEGORY "USB"
 
  KEYNAME "System/CurrentControlSet/Control/StorageDevicePolicies"
   EXPLAIN !!USBExplaination
   POLICY "Enable USB write protect"
    VALUENAME "WriteProtect"
     VALUEOFF NUMERIC 0
     VALUEON NUMERIC 1
   End POLICY
   
 END GATEGORY
 
END GATEGORY

[Strings]
USBExplaination = "Config the USB write protection"