That can be done for example with Scriptlogic's Desktop Authority (
www.scriptlogic.com). We are using its USB & Port security feature to lock down USB and Firewire storages. It has security logging that's based on SQL. That's a nice feature because sometimes, I notice some smart guys that are trying to switch to their Bluetooth or Blackberry devices when they get that they cannot use sticks. Pity them, they do not know, I see all their activities with plugging any suspected device to their computers. And that feature is double as useful for us becaue we do not need to run through rooms and periodically check whether device is disabled on BIOS level or maybe it's needed to remove the device at all. We just do that remotely now. I also like that I can quickly query reporting data from the database, filter it as I need and generate reports which I then send to the person who are responsile for security in our corporation. The ability to generate top 10 that were denied is sometimes very usefull, when I am ordered to make my reporting of what happened to our security last week. Nice that I can schedule it to create this report automatically so I always have it by the time when I need to report summaries on this activity to my heads.
