- Jamf Nation Community
- Products
- Jamf Pro
- macOS Big Sur Deprecated Media Restrictions
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
macOS Big Sur Deprecated Media Restrictions
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-28-2021 12:02 PM
Noticed on the restrictions payload in configuration profiles that Media Restrictions are listed as deprecated after macOS 10.15. Does anybody know if there is an alternative method for blocking external drives in Big Sur?
Labels:
- Labels:
-
Configuration profiles
10 REPLIES 10
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-28-2021 03:52 PM
Not only is it deprecated, after the release of big sur, it is also highly broken and I have an open FB ticket with Apple on it, FB8962596
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 05-28-2021 08:51 PM
Both McAfee's File & Removable Media Protection and Microsoft's Microsoft Defender for Endpoint products list the capability to control access for removable media (no endorsement of either is provided/implied/inferred)
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-08-2021 03:02 PM
Any follow up on this? Is it just hidden somewhere else now?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-08-2021 03:42 PM
I'd like to know more also. Can't find any documentation.
We are on Jamf Pro 10.30.3 and this payload still works on Big Sur for 11.4, yet says it was deprecated post 10.15.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-09-2021 11:56 AM
@glennmiller so Apple did not announce this deprecation at WWDC last year with Big Sur (or I missed it), and it was marked deprecated at the Big Sur release. I have an open FB ticket with Apple posted above. If you have any sort of AppleCare support agreement I would suggest opening a ticket and referencing my FB ticket. I have supplied a lot of data to it, but Apple has pretty much ignored it.
I think that driver kit and system extensions will probably replace this functionality, but media restrictions are highly broken in big sur and less broken in catalina and mojave, but I have been able to reproduce this issue all the way back to mojave. I did not test any further before Mojave though.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 07-11-2021 01:57 PM
Thanks @tlarkin . I might take a slightly different approach and go through our Apple Enterprise contacts. If I find out anything meaningful, will post here.
Reply
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 08-24-2021 03:06 PM
I have a profile installed with Allow on the restrictions section but when I check the profile in System Preferences, it shows Deny for all mount rules. I'm guessing this is why I can't mount any external USB drives. Anybody know how I can fix this?
Reply
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 10-29-2021 10:25 AM
Any word on if this is actually getting removed? I just tested on Monterey 12.0.1 and it seems to still work as expected (block external drives).
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 03-15-2022 08:17 AM
Still working for me as well on Monterey 12.2.1. Can make ext drives read only or block mounting completely. If this is going to be removed, I need an alternative as all our CORP systems do not allow USB storage.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 09-20-2024 08:29 AM
Kicking up the dust on this thread. I just deployed this to a Sonoma and Sequoia machine and it still works properly. We have two configs, General Restrictions, and Lightened Restrictions (for developers and such) and both are working to block external storage, or allow external storage.
