Can USB Be Disabled?

I was wondering whether or not it is possible to disable USB ports on workstations. If so, is there a way to do it so that “smart” workstation users could not easily enable them again.

In an interest of network security I think it would be prudent for us to disable the ports on all workstations in the office so that no one could use USB drives to put stuff onto or pull stuff off of the network.