GFi EndPointSecurity features the ability to control specific ports on client machines via Active Directory. Policy can be put in place to grant or deny users or groups of users access to USB ports, as well as other ports, such as firewire and other removable storage media.