mcx media access doesnt do anything 10.8.1

[tkimpton]

Anyone else notice mcx media access not behaving for Mac OS 10.8.1

i use WGM

Workgroup Manager > Preferences > Media Access > Other Media

Require Auth doesnt prompt for authentication :(

[bentoms]

Have you tried the config profile?

Preferences
Applications
Widgets
Media

Network Access 
Access settings for network media
AirDrop:     Allow  

Hard Disk Media Access 
Access settings for hard disk media
Internal Disks:  Allow  
 Require Authentication 
 Read-Only  
External Disks:  Allow  
 Require Authentication 
 Read-Only  
Disk Images:     Allow  
 Require Authentication 
 Read-Only  
DVD-RAM:     Allow  
 Require Authentication 
 Read-Only  

Disc Media Access 
Access settings for removable disc media
CDs & CD-ROMs:   Allow  
 Require Authentication 
DVDs:    Allow  
 Require Authentication 
Recordable Discs:    Allow  
 Require Authentication 
 Eject at logout 
Eject all removable media at logout

[tkimpton]

Hi Ben

No not yet. Does Casper do Profile Management? I have a bit of a weird setup where i dont have OD and use ADmitMac to authenticate to an AD domain.

Because of ADmitMac i can use WGM for MCX. Its looking like Apple is forcing us away from it :(

[bentoms]

Yep Casper does profile management.. what version is your JSS? not sure when it was implemented but it's in 8.6.

Have a nose under Management >Configuration Profiles.. (basically a web version of apple's profile manager).

[tkimpton]

Thanks. I dont have any certificates set up to will have to look at that.

I looked at timsuttons mcxtoProfile and installed that but it didnt make any difference :(

[tkimpton]

Does any One have a mobile config for prompt external media in xml they can copy and paste up for me to try and install manually on my dev box?

on 10.6.8 it was controlled by com.apple.systemuiserver.plist but in 10.8+ it is doing nothing

[tkimpton]

With help from Jamf Support my machine is showing it is MDM Managed. How do i tell if the Profile is working or even installed?

Unfortuntely it is still letting me plug in external usb sticks without Authentication :(

[tkimpton]

I think this is a bug in 10.8+ Prompt for authentication doesn't prompt. But just denying dies stop them mounting

[jafuller]

Profiles show in System Preferences only when installed. You can also look for them via System Profiler under Software. Lastly, in 10.7 and 10.8 terminal has the command "profiles -P" that will return Profiles that are installed.

In the JSS:
Go to : Management > Configuration Profiles > Add Profile > Create a Configuration Profile > Restrictions > Media
Can be user and/or device level.
Use this to set up a profile for media restrictions that can be scoped.

[tkimpton]

@jafuller yep I know that and did the RTFM. Try it yourselves and you will see its a bug in 10.8+

Mcx no (works on 10.6.8)
ADmit Mac GPO no ( works on 10.6.8)
Config Profiles no

All three not working!

Yep an OS bug!

[tkimpton]

still cant get prompting for authentication to external media working :(