I had an employer who stuck with NT4 into the late 00's primarily because it didn't support USB for this security scenario. Our PCs had the ports but they were effectively useless.