Hello MdRejaulKarim-5428,
Thank you for posting here.
Based on the description, I did a test in my lab, and it works fine.
We can try the steps below:
1.Create an OU and put all devices we want into this OU.
2.Create a GPO and link it to the OU above.
3.Edit the GPO as below: navigate to Computer Configuration->Preferences->Windows Settings->Registry->New ->Registry Item
Action: Update
Hive: HKEY_LOCAL_MACHINE
Key Path: SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked (we add "\Blocked")
Value name
Default: {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
Value type: REG_SZ
4.Run gpupdate /force on one device and check if the GPO takes effect.
Hope the information is helpful. If anything is unclear, please feel free to let us know.
Best Regards,
Daisy Zhou