USB Restriction on standard users

[mikevos]

Hi,

As for now we are restricting access to USB drives via a configuration profile.
This allows us to prompt for a username and password when a USB device is connected.
Unfortunately the only credentials that are accepted to mount the drive, are admin credentials.

Does anyone have experience with these settings and know how to allow standard users to still mount the USB drive with their own credentials?

In short;
A standard user must be able to mount a USB drive with their own credentials.

I've already tried editing the authorizationdb using the following commands:

security authorizationdb write system.volume.removable allow
security authorizationdb write system.volume.removable.adopt allow

And for the sake of being sure.

security authorizationdb write system.volume.external allow
security authorizationdb write system.volume.external.adopt allow

[mikevos]

Anyone?

[spotter · Accepted solution]

I was never able to get this to preform as we needed it to, so we went another route and purchased EndPoint Protector appliances which works great.

It allows us to set everything as read only but then we can give either users or devices the Read/Write control.

Another nice feature and it was a must for us you can white list devices.

Endpoint Protector

[mikevos]

Thanks @Potter !

I will look in to this.. Seems to be exactly what we need.