How to lock and unlock your USB ports

You can disable and re-enable USB storage access with a Registry tweak. And, because you can change the Registry only from inside an administrator-level account, only someone with such an account can do it.

If you’re comfortable working with Regedit, the key you want to go to is HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl>Set\Services\USBSTOR. The value inside that key is Start. 

To disable USB storage, change Start’s data to 4. 

To enable it again, change the data to 3.