USB Port Security

[Chints84]

First Create Microsoft server's  make domain server, ip and dns assigned. then create sub catagories of organisation units of department in active directory. we want to assign port security many ways like scripting, group policy to assigned particular organisation unit usb port block policy or give  particular user's special permission to allow usb access port, which have member of administrator of domain which have full access. when keep in Lan port connected to all user's end systems in network. if one system disconnect from Lan network. then assign policy may not applicable due to system is not in network of domain policy. in this case we have required local group policy on pc or another way regedit we can change port security or apply security script to block port.

my question what is best way of port security in organisation company data ( without application or domain policy like symantec or regedit or active directory group policy)?

will give reply