Access Local USB Device only via RDP

Hi We have a scenario where a number of developers residing on a less secure network have access to Windows 7 virtual machines. Access is via the standard RDP protocol. In the domain that these machines reside we would wish to set in group policy access to the local machine USB devices. However, we would also wish to ensure that we block access to the local drives on the client. Looking...