One of the big things I'm looking forward to is the new ability to block hardware installation by device ID via GPO. I would absolutely love to prevent people from attaching their iPods to machines on my network...\
You can't prevent people from attaching their iPods to their machines. Perhaps you can prevent them from using them as they are intended to be used....
But why do you need to play god?