AVD - block all outgoing connections with windows firewall

I would like to block all outgoing connections by default and enable (via intune policy and only for certain users) only the destinations where they can work; I would like to do all this with windows...