Symentec endpoint protection how to block user usb device?

i tried to block a user, who use usb device in his pc. I configured in the Symentec endpoint protection. But, the user can use usb device in other pc. how can   configure to block the user to use usb device.

thank you very.