A number of customers have raised the need to be able to block all USB devices except for those explicitly whitelisted by VID:PID.
Today we have a USB Detachable Whitelist that allows the admin to specify which devices should be handed off to apps such as Citrix Receiver.
Customers would like a similar policy that would whitelist USB devices for use natively in Chrome OS.