Hi, Kevin -san.
Your perception is correct.
You can only control the USB vid , pid by computer.
Since you cannot control USB vid , pid redirection on a per user basis, it is easier to create a separate desktop pool and enumerate the vid,pid of USB devices that you allow.
This is not an option.
Thanks.
yukiafronia