How to block usb access in VMware when SEP is installed only on the Host Machine

I have an environment where the End Users have Access to Create unlimited VMware Machines on their Base Host machines. We have SEP installed on all the Host Machines with USB blocking enabled.However when the VMwares are created in these Host Machines the users are Able to Access the USB drives from within the VMwares.This is an Information Security (Data Loss) Nightmare. Is there a way to block the USB Access through the VMware using the SEP installed in the Host Machine. Please suggest if any. Else are there alternate (3rd Party) ways to achieve this ?

Please Note: We cannot install SEP on all the VMwares that are getting created everyday.