Thank you both for the replies.
We are a small charity (70 users) with SBS 2011 and I am told this cannot be done in GPO on the server, My idea is we have approx. 16 users with encrypted pen drives but no other device can be used.
I wanted to auto scan any drive inserted but as carwiz says I think I can do that through AVG cloud care antivirus.
I think after doing some reading I may have issues as other pen drives have been used on a lot of the stations.
I will try the tut and see how far I get, I am the ICT officer covering a multitude of sins but master of none.
cheers,
John.