Moved to ePO for faster support.
You'll need to use the DCM portion of the DLP module. Within that policy, you can setup to block USB's and whatnot.
If you don't have the DLP module, you will need to download and install the DLP extension as well as check in the DLP agent into the master repository, then deploy it out to each windows machine you want to manage USB's.
You may want to consider the McAfee Device Control product ( http://www.mcafee.com/us/products/device-control.aspx ) as a means of controlling USB devices.
"McAfee Device Control protects your data from falling into the wrong hands via removable storage devices and media, such as USB drives, MP3 players, CDs, and DVDs. It enables you to specify and categorize which devices may or may not be used and enforce what data can and cannot be transferred to these devices — in the office, at home, or on the move. Device Control provides content- and context-aware, device-blocking capabilities . . ."
It is centrally controlled by ePO via an extension in ePO.
Hope this helps.
Is there any kind of documentation on how to do this?
'DLP' is a product suite. Focus is on Data.
Device Control is a more focused endpoint product. Focus is on Devices.
http://www.mcafee.com/us/products/dlp-endpoint.aspx McAfee DLP Endpoint
http://www.mcafee.com/us/products/dlp-discover.aspx McAfee DLP Discover
http://www.mcafee.com/us/products/dlp-manager.aspx McAfee DLP Manager
http://www.mcafee.com/us/products/dlp-monitor.aspx McAfee DLP Monitor
http://www.mcafee.com/us/products/dlp-prevent.aspx McAfee DLP Prevent
These are good at managing Data which you define as sensitive that needs control leaving the premises via many means, but not specifically/exclusively USB. You have choices as to which pieces of the DLP suite are needed or desired in your environment
http://www.mcafee.com/us/products/device-control.aspx McAfee Device Control
which is better at handling USB port issues (as well as CD/DVD, MP3, COM/LPT ports, etc.) but not as good at controlling sensitive data.
Which is your intended goal:
1) Strict control of all USB ports for external drives? (Device Control)
2) Strict control of sensitive data, but allowing external USB drives for less sensitive information? (DLP)
http://www.mcafee.com/us/apps/products-az.aspx Products A-Z
is a good source for exploring more options.
Post back with questions.