In SEP we can block access to USB drives using device control.
It would be really useful if there was an option in SEPM that allowed an administrator to suspend the USB device control for up to x number of hours.
Say company policy is USB is not alllowed, but sometimes it is needed. The employees can call Support and support log into SEPM. Right click the computer and click "Open usb access". USB drives are then allowed for like say 1 hour, before the access is removed again.
Toreb