Managing and enforcing security policies for devices and apps to protect organizational data through Intune
@Pradeep Joshi,Thanks for posting in Q&A.
From your description, I know that you want to block USB pen drive and other storage devices but allow some specific USB devices.
Based on my research, you can restrict USB devices and allow specific USB devices using Administrative Templates via Intune.
Here is a link with detailed information you can refer.
https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-restrict-usb
Please try above information. If there is any update, feel free to let me know.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.