Is it possible to allow only certain types or brands of USB devices based upon their manufacturer/model device signature? In other words, is it possible to centrally manage what USB devices can be plugged into clientsbased upon the device type (thumbdrive vs keyboard or mouse) or by brand identifier, etc.? I'm told their are third-party products that can do this, but is it possible via Group Policy with Windows 7?

Via applocker publisher rules u can prohibit the types u want by the digital signature however in order to do that u must first have that brand's signature installed then after clicking the .exe file u move the slider up all apps with that signature will be restricted for the determined user,via group policy u can also prevent USB devices from any install..regards,RR

Oh well. Sounds like we'll have to look for a third-party solution for now. We need to be able to allow USB keyboards, but block thumbdrives unless they're from a specific vendor. Sounds like that's not quite "there" yet.