I was thinking about the same - about disabling the whole usb subsystem - but obviously it's not the solution.
Maybe there is a way to remove usb flash memory driver from the system so that usb memory keys wouldn't be recognized.
By the way - users cannot acces web based mail systems - they...