Skip to main content
Question

Script/Policy to Prevent Write to DVD/USB

  • February 26, 2014
  • 6 replies
  • 30 views

Forum|alt.badge.img+12

I have to prevent our MACS from writing to DVD drive or USB drive. Has anyone done this successfully in their environment? dont see much info about it other than changing the defaults for DVD write.

6 replies

Forum|alt.badge.img+1
  • New Contributor
  • February 26, 2014

remove the physical connection to the drives and disable remove-able media?


Forum|alt.badge.img+6
  • Contributor
  • February 26, 2014

Yessir!

We use a Configuration Profile

Under Options - add a payload for restrictions and check the boxes for the restrictions you need under the Media tab.

We successfully disable external mass storage, write to disk, etc...

Edit/Addition: I should mention that I can disable write to CD/DVD and still allow read, I can't get that granular with mass storage, it is all or nothing. It essentially stops it from mounting the disk. I am looking into a product by lumens ion for getting more granular, I'll report back with my findings.


Forum|alt.badge.img+12
  • Author
  • Contributor
  • February 26, 2014

@mikebetzel I will try this.... Thanks man!


Forum|alt.badge.img+6
  • Contributor
  • February 26, 2014

Glad to help!


Forum|alt.badge.img+1
  • New Contributor
  • July 16, 2020

by adding payload for restrictions / media tab, successfully block usb storage but after this we cannot open any dmg files for installation


mani2care
Forum|alt.badge.img+7
  • Contributor
  • December 2, 2020

do we have any extension attribute to know the USB blocked status