Endpoint Protection

I was wondering if anybody knew a way to block cell phones / smart phones, usually plugged in via USB, without blocking access to USB flash drives.  I want most people to be able to use their flash drives as they wish (with the exception of those individual drives I block by device ID) but keep them from plugging their phones into the comptuers.

I tried using  *VEN_APPLE&PROD_IPOD* - I'm not sure yet if that's working for the iPhones, but if it does, it's ONLY the iPhones - not other smart phones and cell phones.

If anybody has any ideas, I'd be happy to hear them.   Thanks

Something like this:

takes care of the HTC Andriod phone (probably anything from HTC):

*Vid_0bb4*

Put that in the policies  tab, hardware devices, then in the group policy, add the newly added phone device as a blocked device.
May be a way doing it for classes, too- which may cover all phones, but I see phones coming in as various devices.
The above blocked anything from that Vendor using their ID.
Pretty effective here..........

Thanks =)  At least that's a start.  I wouldn't mind trying to get my hands on some vendor IDs and putting them all in individually - at least the most common ones.   That's a lot easier than blocking every individual device as it appears.

I was hoping for a way to block with classes, but as far as I've seen, most of the phones just come up as "mass storage device", using the same class ID as flash drives.   I'm a phone w--re though, so I'm sure I have enough "old" phones laying around from various vendors that I can just plug in to get the vendor IDs. 

For anyone else that may need it, here's a (pretty full) list of Vendor IDs for all sorts of USB hardware, including phones that can plug in via USB.

http://www.linux-usb.org/usb.ids