Application and Device Control

How would I block all usb access and still allow iphones to Synch along HID devices such as printers keyboard etc. is this a possibility?

I understand that we can use application control to allow read only access and then phones would Synch. But we want to BLOCK USB Thumbdrives and Hard drives, but still allow HID devices.