I have recently been asked if we had the ability to only allow users write access to external drives that are filevault encrypted. Currently we are managing write access to our external drives via a config profile scoped by AD Security group membership. From what I can see, the available options seem to be all or nothing, in that we either allow write access to all external drives, or we don't allow access to any external drives. Has anybody else been asked to do something similar? Any suggestions?
