Is there any way you can enforce different policies on the same user or group of users based on the machine that user is logged on to? For Example: for desktops a total lockdown and for laptops certain usb devices should be allowed ?
I believe its by user. But as a test you can try the different policies on Laptops vs. Desktops by putting them in the System Tree under different folders.