Hello guys,
i am working in a domain enviroment that contains moer than 150 workstation, and we are working under a 2003 server domain controller, so my question now is that i want to deny the access for the removable storage devices and not just the usb ports because that all my enviroment users are usin a USB Mouse and keyboard, so i just need to deny the access for the removable storage devices for more security.
Any idea?

You need 2008 as I understand it. Don't thnk they figured out how to do that under 2003. There might be a program somewhere for that.

"Best Practices", Event viewer, host file, perfmon, are in my top 10

I think it can't be done with W2K3 but you can install software for that (on client). Like DeviceLock.

err..... forgot..
there's another way to disable USB storage, but it still must be done on the client side.
But if you want to done it from the Domain controller, you can create a script and then put the script on the Group Policy.

Here is the trick:
* Set security to DENY for selected group or for all users on 2 files below:
c:\windows\inf\usbstor.pnf
c:\windows\inf\usbstor.inf

You can create a batch file or vbscript to do this, and then put the script on Group Policy (Computer Configuration-Windows Settings-Scripts(Startup/Shutdown). And make sure that Group Policy applied on the Client.

If the settings had applied on client, then.. PUFF... ALL Removeable Storage Devices will not be recognize.

Thank you for help guys.