treasures

+1! We want to disable the ability to use USB Mass Storage on our iMacs. Device Control and Media Control do not seem to work with OS X machines. I created a Policy with Device Control enabled to block Disk Storage, and also enable Media Control to block everything except for CD/DVD. All settings were set to Force. I applied the policy and rebooted the computers assigned to it. I verified that the computers had the correct policies in place. I inserted a USB stick, it mounted, and I could write to it. This is not what I want. What am I doing wrong? We are running ERA Server 6.4.295.0. The clients are OS 10.11 with Endpoint Antivirus 6.3.85.1 and ERA Agent 6.4.232.0.