Using MDM to restrict access to USB mass storage on OSX

[felixfx2]

Hi there,

Anyone managed to do so via MDM ?

[jared_f]

@felixfx2 Do you have OSX Server? I known you can create a profile in profile manager to restrict this and download/upload to Meraki.

[felixfx2]

@jared_f i don't have OSX server.. having full cloud services. I did see some older solutions using Apple Configurator to do so, but the latest versions stopped giving me that option.

[sshort]

It's worth the $20 for all the MDM config options you get, even if you're not actually going to use the app for server functionality. You'd want to uncheck the box I highlighted to disable external disks 

[jared_f]

@felixfx2 I created a profile for it in OSX Server and placed it in Google Drive if you would like it. Note: All the other payloads are standard that comes with restrictions, I only changed the USB to deny like @sshort mentioned. You can change the name/description if you want in AC2.

https://drive.google.com/file/d/1jArU3tp_TxnK7jF9xs1rIAAOz8nC27E7/view?usp=sharing

Hope it helps,

Jared