Once administrator registered USB flash drives with AD account, it has an option to block the use of USB flash drives when the AD users name set up for the USB flash drives mismatches the AD user name used to log into the PC.
The following explanations are on how use this feature when needed.
1. Go to Usage on change policy tap and select Compare AD feature as below.
it can be set as Block or Read-only when there is a mismatch.
2. if set Block and if the user name set for the USB flash drive is different from the AD user name used to log into the PC or the user who logged into the PC did not log in with their AD account, the below notification will come up, blocking the login.