"Allow USB accessories while device is locked" not present in Jamf Pro?

[jamf_arviem]

Hi all,

I need to disable the following restriction:

Allow USB accessories while device is locked

I can find it in Apple Configurator but not when setting restrictions in Jamf Pro.
Is it true that you can't set that setting using Jamf Pro?

[shaquir · Accepted solution]

Hi @jamf_arviem ,
I believe the option that you're looking for is: Allow USB restricted mode (iOS 11.4.1 or later, supervised only)

It can be found towards the bottom of iOS functionality restrictions list

If you are unable to see it, can you please confirm what version of Jamf Pro you have.

[jamf_arviem]

Hi @shaquir ,

Thanks for your reply.
I see the USB restricted mode but I'm unsure of what it's doing when unselected.
My understanding is that if you select it, USB will be still enabled for a period, but does "unselecting" it really block the USB drive access when the device is unlocked?

[shaquir]

In Jamf, for many payloads, deselecting the "Allow" option is equivalent to Disallow.
As you may see, a lot of the Allow options are selected by default.
When applying multiple restrictions to a device, the most restrictive option is selected. (i.e If you deselect "Allow USB restricted mode" in one restriction payload, it will stay restricted in all machines that it is scoped to even if it is Allowed in others)
Just remember to test before deploying

[jamf_arviem]

Thanks @shaquir !

[T_Armstrong]

Easiest thing if you want to be 100% certain is to prepare your profile in configurator, SIGN IT and import into Jamf.