Disabling Use of USB Drives

I’ve found posts that describe various methods ofhow to stop individuals from using USB drives, but still allowing them to use USB Mice, Keyboards and Printers.

In Windows 2000 (on a network with Windows Server 2003), what is the best way to keep people from using USB external storage?

Also, most importantly, will disabling USB drive access also stop their ability to use USB “hardware keys” that are needed to run software programs?