We have blocked all USB devices and whitelisted mouse/keyboards from there.
Now as more and more USB devices needs to be whitelisted, current method is not that easy.
What we would like to see is that when user plugs USB device to computer, there would be popup showing couple options.
A) Leave it like it is
B) Request to IT-department to whitelist device
And by hitting B -option, it would generate message in SEPM that there's acceptance waiting for that device. Then admin could easily just click either reject or accept.