Setting USB Permissions (Sys Admin)

Hey Everyone,

I work as a System Administrator Intern and I'm trying to find a solution to a new security procedure we're rolling out for the company I work for.

The Conditions :

1. Disable USB Permissions for mass storage and other devices besides keyboards and mice.

2. Laptop must remain under our company domain.

3. Laptop has an administrator account setup for the users to install software but can be disabled after the changes have been made.

Any feedback would be greatly appreciated,

Thanks,

Sachin