I have a windows server 2003 domain controller. I want someone to make me a group policy on my server and with it I want to regulate which user will have access to usb drives and which not. Usb port must remain enabled because some computers use usb keyboards and mouses. I only need to disable usb memory sticks, usb hard disks etc. But if a user with higher privileges sits on a computer, he still needs to have access to all usb features.