Hi
check you configure following below steps:
1. check USB access policy in Global Policies, such as "Allow"
2. check USB access policy in Pool Policies, such as "Inherit"
3. Add users in "User overrides", like below picture, and set USB access "Deny"