I have the config profile setup to block writing to external devices. This is working for external hard drives and thumb drives. Users are still able to sync iOS devices with iTunes though. Should that config profile be blocking the ability to sync with iOS devices too? How would I accomplish this?
I don't know if this is exactly what you are looking for, but this command will block iTunes sync...we use it to keep lab macs from filling up with syncs when the users actually only want to charge their iOS device:
sudo defaults write com.apple.itunes DeviceBackupsDisabled -bool YES
I didn't see iTunes Sync Block in the CP payload of 'Restrictions', but maybe I'm missing that it's hidden elsewhere...