I know there is a group policy to disable thumb drives but my manager want a Group Policy to do the below: · Can we prevent a non-company thumb drive from being inserted to one of our machines? · Can we prevent writing a file to a thumb drive unless the file is encrypted? This cant be done can it?

Looks like Bit Locker Pro would do that trick but thats only in Ultimate and Enterprise licenses.