GPO : Enable USB Keyboard and Mouse, considering that USB Mass Storage (key, disk, dvd) are disable for end-users

Hello,

What is the best way, through GPO (AD) to enable USB Keyboard and Mouse, on a laptop, considering that USB Mass Storage (key, disk, dvd) are disable for end-users ?
Maybe, nothing must be done ?