IS there any script which will restrict USB mass storage device and will allow USB keyboards and mou

I would like to restrict USB mass storage devices through active
directory but want to allow USB mouse and Keyboard