Prevent use of USB keys on client PC's

[Spider]

Is there any way I can prevent users sticking in a USB memeory PC into their PC's and taking data off the network and home with them?
Im locking down what users can and cannot copy to/from the works PC's and wondered if there was anything in group policy that would allow me to prevent them from simply inserting a USB key for example and copying data to/from it.

What are the best practices for securing a network in this way?

Thanks

 

[Spider]

If its configurable throught a GPO (as linked above), can i ask why people are buying and using 3rd party software for it?

 

[Spider]

ah, that makes sense!

thnx