Unmanaged client ADC

Hello everyone,

I've got a couple of servers which are completely disconnected from our managed network and wish to protect them from unauthorized removable media (USB sticks/external HDDs).
I've already tested the removable media settings of Windows Group Policy (GPO) but these can only prevent device driver installation, so all devices which have been connected already are not filtered out.

I need to find a way to have complete control on all removable media, whether new or old.

As I understand, i can configure something like that through SEPM with Application and Device Control (ADC) policies, but the question is, can i make similar changes on the unmanaged client directly?

Thanks in advance,

Pavlos