Script/Policy to Prevent Write to DVD/USB

wmateo
Contributor

I have to prevent our MACS from writing to DVD drive or USB drive. Has anyone done this successfully in their environment? dont see much info about it other than changing the defaults for DVD write.

6 REPLIES 6

calum_oac
New Contributor

remove the physical connection to the drives and disable remove-able media?

mikebetzel
New Contributor

Yessir!

We use a Configuration Profile

Under Options - add a payload for restrictions and check the boxes for the restrictions you need under the Media tab.

We successfully disable external mass storage, write to disk, etc...

Edit/Addition: I should mention that I can disable write to CD/DVD and still allow read, I can't get that granular with mass storage, it is all or nothing. It essentially stops it from mounting the disk. I am looking into a product by lumens ion for getting more granular, I'll report back with my findings.

wmateo
Contributor

@mikebetzel I will try this.... Thanks man!

mikebetzel
New Contributor

Glad to help!

manjunath
New Contributor II

by adding payload for restrictions / media tab, successfully block usb storage but after this we cannot open any dmg files for installation

mani2care
Contributor

do we have any extension attribute to know the USB blocked status