I want to be able to control device installation for our windows 7 standard users. I would like to prevent them from being able to use flash drives or other devices without a UAC prompt and then admin approval. I have seen GPO settings for disabling but they do not prompt for approval and then prevent all use of the USB ports, even when logged on as an administrator. You can troubleshoot as an admin but I would like to install things like USB Audio on my image so that it will work but not allow standard users to attach anything else without a UAC prompt and credentials added by our technicians. Anyone found a way to manage this?