You can create removable storage control sets to determine the level of restrictions applied to storage devices.
In Jamf Protect, click Device Controls.
Click Create.
Give your removable storage control set a name.
Select one of the following Default Permission options from the menu.
Prevent
Read Only
Read and Write
Important:
The default permission settings will be applied to all removable storage devices unless the removable device matches a configured override rule. For more information, see Adding Override Rules to Removable Storage Controls.
(Optional) Edit the Default Local Notification Message.
Note:
Local notification messages apply to Prevent and Read Only permission settings based on the selected configuration. If you do not edit the Local Notification Message, one of the following default notification messages is displayed when a user mounts a removable storage device:
Prevent —This removable storage device is not allowed.
Read Only —This removable storage device is limited to read-only.
Click Save.
Jamf Protect now displays a custom message to users when a removable storage device is blocked or limited to read-only permissions.