This article describes the scenario of restricting access to memory cards while keeping other USB removable devices allowed.
How-to
Access check to internal card readers/memory cards is performed on Removable level only as they do not have supported interface to control with DeviceLock.
To restrict access to memory cards while keeping other USB removable devices allowed:
1. Configure "Removable" permissions of "System: Full Control" only, or if needed for other User/Group accounts as well