How to disable USB device Using LDAP Server

I have LDAP server and my clients are authenticated via our LDAP server. Due to some circumstances i would like to restrict my users from using USB MAS storage devices.

I have tried at client end tricks and it worked but i have huge number of users so i would like to block USB from my LDAP server to reduce administrative effort.

Please let me know if anyone has any way.

I am also doing research i will share if i found something.

Thanks in advance

Regards, -Mansur