USB ports control

Hello, All!

I want to control an USB ports. My filter attaches to every PDO by ARRIVAL
notification on GUID_CLASS_USB_DEVICE when interface is changing. But when I
plug something like an Apacer HandyDrive my filter recieve only
IRP_MN_QUERY_DEVICE_RELATIONS. I want to deny access to this device. If I
fail this request with STATUS_ACCESS_DENIED nothing happens (device work
well, removable disk is mounting). May be I must fail requests with special
processing? Or I must filter another device objects?

Any help would be appreciated.
Eugene.