The USB Monitor can be configured to silently notify you when a USB drive is inserted in a user’s computer. If you suspect wrongdoing, you can use USBDriveFiles.vbs to connect to the remote system, map a drive to the device and browse the files on the USB drive. Some interesting coding problems, if you want to take a look at the code.