you can do it via local policy, or to protect an entire site, similar to what DanCh99 suggested, you could look into Safend -- http://www.safend.com/11-en/Safend.aspx. This what my company uses, and its very very effective, and not only USB ports, but all endpoint connections such as bluetooth, serial, wireless and firewire. Handy feature of setting all CD/DVD burners to read-only too! Everything gets logged, so you can prevent intellectual property theft too.
You could do this by putting policy in place.
If you need more information don't hesitate to ask.
Best Regards