There are several questions here about disabling USB storage in general via GPO but I can find no information on whether it is possible to add exceptions for specific devices. Put another way, can USB drive types that include builtin encryption be enabled but generic USB drives disabled? This needs to work on Windows XP.