open source end-point security solution ?

[davemitch () mailinator com]

is there an open source product for implementing end-point security ? 
 the problem is to "white list" official USB- pen drives and external storage devices, and disallow non-official 
devices. 
the existing network users are on an windows active directory domain, and pushing a group policy is do-able