Disabling USB devices in a network environment for security reasons

From: Tachys (tachys17_at_hotmail.com)
Date: 09/30/03 

Date: Tue, 30 Sep 2003 07:13:39 -0700

I'm trying to disable USB devices on my network. I want to
do this dynamically through registries. I've found a
knowledge base article that talked about disabling usb
storage. It talke about setting the value "start" for the
key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Services\usbstor to 4. Doing this doesn't allow a storage
device such has a zip drive to be connected. I've looked
at the registries and there is also the keys usbhub and
usbuhci that seem related to usb. Can I do the same thing
to those? Also if I plug a usb printer would a new key
appear name usbprint? If yes then where can I found a list
or relevant keys that I need to disable to accomplish my
goals?
What I hope to accomplish is to disable usb storage
devices for everyone on the network but leave some usb for
admins. And I really want to do this with registries.
Thanks in advance for any help anyone can offer.