Configuring and Testing Removable Storage Controls - Jamf Protect Evaluation Guide

Jamf Protect Evaluation Guide
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Configure Removable Storage Control Sets to control the level of access removable devices have to computers running Jamf Protect.

Requirements

  • A Jamf Protect plan in effect across selected computers.

  • Two storage devices—one encrypted and the other unencrypted—selected from Jamf's supported removable storage devices.

  1. In Jamf Protect, click Device Controls.
  2. Click Create.
  3. Enter a name for your Removable Storage Control Sets.
  4. Click Default Permission and select Read Only.
  5. Edit the Default Local Notification to read Test notification.
  6. In the Total Overrides section, click + Add.
  7. Select Encrypted Devices from the pop-up menu and click + Add.
  8. In the Encrypted Devices Override Details section, in Permissions, select Read and Write.
  9. Click Save.
  10. Navigate to the Plans page.
  11. Select a Plan on which you have computer access.
  12. Click Edit.
  13. In the Advanced Agent Configuration, in Removable Storage Control Sets, select the control set that you previously defined.
  14. Click Save.
  15. Dock your unencrypted removable device to the target computer that has the Removable Storage Control Sets applied.
  16. Attempt to add a file to the device, and note the Default Local Notification Message of "Test notification".
  17. Dock your encrypted removable device to the target computer and note that you can read and write on the remote device.
  18. In Alerts, an EnforcedRemovableDevicePolicy alert is reported with matching restriction information.