Removable Disks security modes: disabled, learning, enabled

There are three modes for the security restrictions on Removable Disks:

In disabled mode, users can access any removable storage device and no data is logged.
In learning mode, any user actions will not be blocked, but can be logged. When you have fine-tuned your environment sufficiently in learning mode, you can set Removable Disks security to enabled mode.
In enabled mode, only authorized removable storage devices can be accessed.

If you select the option Log security events, security events will also be logged if Removable Disks Security is in learning mode.
If you select the option Audit allowed write actions, allowed write actions will also be logged if Removable Disks Security is in learning mode.
If you select the option Notify users about security events, users will also be notified if Removable Disks Security is in learning mode.