Config Profile to Disable External Drives

New Contributor III

We are being pushed to disable the use of USB drives on all devices including Macs. I have created the Config Profile and got it working but the only way it seems to actually enforce or remove is after the user logs out and back in or logs in for the first time after the profile was pushed. Is this a normal instance? It says the profile is successfully pushed but nothing happens until the user logs in again.