System Manager USB lock?

LeonJVR1 — Mon, 14 Sep 2020 12:32:02 GMT

Hi everyone,

Can someone tell me if its possible to block any devices(Mac's/Laptops) USB ports on System Manager?

I have googled it and found some old threads that say its not possible but nothing in regards to the latest SM.

Re: System Manager USB lock?

BlakeRichardson — Tue, 22 Sep 2020 01:48:36 GMT

@LeonJVR1 I don't believe so, there are no "Finder" settings configurable in systems manager. Currently its very limited in what it can do for MacOS devices.

Re: System Manager USB lock?

jm_peterson — Tue, 22 Sep 2020 21:23:19 GMT

If you are just looking to block mass storage USB devices you can use the following profile

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDescription</key>
<string>Configures Allowed Media settings</string>
<key>PayloadDisplayName</key>
<string>Allowed Media</string>
<key>PayloadIdentifier</key>
<string>9D5EA197-E941-48CD-84BA-28373017A52C.com.apple.systemuiserver.2C31DE6A-E143-4800-ABD4-369EA4474521</string>
<key>PayloadOrganization</key>
<string>MegaCorp</string>
<key>PayloadType</key>
<string>com.apple.systemuiserver</string>
<key>PayloadUUID</key>
<string>2C31DE6A-E143-4800-ABD4-369EA4474521</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>logout-eject</key>
<dict>
<key>harddisk-external</key>
<array>
<string>deny</string>
<string>eject</string>
</array>
</dict>
<key>mount-controls</key>
<dict>
<key>harddisk-external</key>
<array>
<string>deny</string>
<string>eject</string>
</array>
</dict>
<key>unmount-controls</key>
<dict>
<key>harddisk-external</key>
<array>
<string>deny</string>
<string>eject</string>
</array>
</dict>
</dict>
</array>
<key>PayloadDescription</key>
<string>USB Management</string>
<key>PayloadDisplayName</key>
<string>USB Settings</string>
<key>PayloadIdentifier</key>
<string>9D5EA197-E941-48CD-84BA-28373017A52C</string>
<key>PayloadOrganization</key>
<string>MegaCorp</string>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>9D5EA197-E941-48CD-84BA-28373017A52C</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

topic System Manager USB lock? in Endpoint Security

System Manager USB lock?

Re: System Manager USB lock?

Re: System Manager USB lock?