How to block the application (.exe) running on USB disk

Answers:
Add a new application policy and fill in the text field of the Application option as below:

        APPDIR:$UDISK$:*.exe

Please refer to the picture below: