Preventing your company data from walking away is a real security concern for administrators.
Cameras, USB flash drives,  and phones using flash media etc can put your network at risk.
This can all be locked out using Group Policy.
You can select devices to blacklist to ensure they cannot be used.  You can also whitelist, so a device type will not be permitted unless it’s on an approved list.
You can find policy settings that enable hardware lockout at:
Computer Configuration/Policies/Administrative Templates/System/Device Installation/Device Installation Restrictions.
Hardware lockout policy settings are valid for Windows Vista onward and include Windows 7.