allow specific USB storage device in Active Directory

Solution 1:

Group Policy magic.

Copy and paste from:

https://msdn.microsoft.com/en-us/library/bb530324.aspx#grouppolicydeviceinstall_topic6

Allow users to install only authorized devices

This scenario builds upon the first scenario, Prevent installation of all devices, where you prevented the installation of any device. In this scenario, you add a list of allowed devices to the policy and include the hardware ID for your USB memory drive.

So you first prevent the installation of all USB devices using one GPO setting, then you use another GPO setting to allow only certain ones. The latter setting will take precedence, effectively creating "exceptions."