policy not apply

I applied the policy to block the usb access
It implemented successfuly on all clients but on remote location system engineer report that USB is working on 2-3 systems.
How to diagnose?