Disable USB auto-run and enforce application whitelisting (AppLocker).
If your 2011 system is failing or insecure, consider upgrading to a cloud-based or hybrid solution: 2011 access control software user manual1 - adises access control system 2011 software download