I'm in the process of developing a kiosk type application on Windows Vista. The kiosk will download files to the USB and Memory card drives of the machine. I'd like to be able to set up the kiosk so that no other devices can be used in the USB except for removable drives, i.e. no keyboards etc. EXCEPT, I need for an admin to be able to plug in their keyboard to be able to shut down the kiosk application if needed and administer the machine. Any suggestions? I've been reading the following guide on controlling device installation using Group Policy - http://www.microsoft.com/technet/windowsvista/library/9fe5bf05-a4a9-44e2-a0c3-b4b4eaaa37f3.mspx and I can kind of see how you could go about restricting ALL devices from being installed but then allowing removable drives, but I'm at a bit ofa loss as to how I'd let the Admin into the machine

I'd probably opt for allowing the Administrator to Remote Desktop into the machine or providing some similar form of Remote Administration. I can't see a way to make the USB thing workable (after all how are you going to identify the Administrator if they don't have a keyboard available to enter their credentials?)

Thanks for that Andy. What I'll need to do then is disable all devices other than removable devices to be installed on the USB drive

You could use the remote shutdown command to restart the kiosk if needed. Check out this link to see how it's done. http://www.maximumpcguides.com/use-the-remote-shutdown-tool-to-shutdown-restart-or-logoff-a-local-or-networked-computer/