Our systems do not permit usb storage devices, but you can configure a badUSB to be read as a simple generic mouse/keyboard. On high value devices we will hotgl

Our systems do not permit usb storage devices, but you can configure a badUSB to be read as a simple generic mouse/keyboard. On high value devices we will hotglue unneeded ports but on the general class of computers you just have policy and guidance. We also have some computers that just can't tolerate any kind of USB policy because of the devices that need to be plugged into them. Maybe they are used by EEs for prototyping or the thingy('s manufacturer) in use is ornery about it. Eventually people need to be trusted to use their stuff properly and can't have their hand held for every little thing.