Blocking USB through GPO & excluding certain users

Hi,

I am looking for blocking USB devices in our Win 2008R2 SP1 server. I am already aware about GPO policy "\User Configuration\Policies\Administrative Templates\System\Removable Storage Access" & it's working perfectly here.

Only there are few concern's as below.

1: I want to exclude certain users/groups from this policy.

2: All other rules/policy's in original "default domain controller policy" should be applied to everyone like PW policies, WSUS policies etc..

Thanks,

Sandesh