If a user has a legitimate business case for usb copy then follow these steps to allow;
If the user is remote at an event login with TeamViewer, connect the vpn (use your own credentials for speed), open registry editor as administrator, follow the steps below...