Hi Sebastijan,
I have recently introduced USB security via ME-DC in our company,
maybe I can help you.
I am not 100% sure what you mean/what you want to do..?
I have found the notification not useful because often it appears
after the next reboot of the client. Often there was no ondemand
notification of a new inserted drive.
Also the notification repeated every reboot when i.e. a webcam gets
blocked. So the users had to click on the message every time they login..
We have tested a lot with computer-block and then unblock as
users...I have found user configuration very unsecure and also I have
had many troubles revoking user configurations...when users chance
computers somehow the configurations mixed up and in the end I
didn't know which client was blocked/unblocked by the last user...
We have now implemented only computer configurations, targeting the
AD OUs. When clients get added to the OUs they also get the
configurations automatically.