discusses the exclusions.
No, its not possible to disable the cancel option - but remember, devices can become read-only if not encrypted.
The reason is, what if a user plugs in their phone, or a 2TB hard disk? You might not want to force encryption of these, if only to save helpdesk calls.
Thanks for the info SafeBoot. I will look at the post for the exclusions.