Use Intune to block USB Storage devices and whitelist specific devices with

Hi,

I would like to be able to block USB Storage Devices with Intune and whitelist individual devices. I would also like to encrypt any whitelisted devices once inserted. Is this possible with Intune policies ? 

Using windows 10 devices on an Azure/on prem hybrid domain.

Thanks