USB storage devices can pose a security risk to organizational devices by allowing unauthorized data transfer or external storage access. Using the Run Script feature in SureMDM, administrators can remotely block or unblock USB storage functionality on managed macOS devices. This article provides the steps required to deploy shell scripts through SureMDM to control USB access across macOS endpoints efficiently and securely.
Purpose
The purpose of this article is to help administrators:
- Restrict USB storage device access on macOS devices
- Re-enable USB storage access when required
- Improve device security and prevent unauthorized data transfer
Pre-requisites
- An active SureMDM Account
- macOS devices are enrolled in SureMDM
- Devices are online and connected to the internet
Steps
(Allow USB Storage Devices)
- Login to SureMDM Console.
- Navigate to Jobs > New Jobs > macOS > Runscript > USB Media Control > Select Allow USB Storage Devices > Click on Insert > Click on Save:
- Once the runscript is saved, deploy the same on the device that requires USB storage to be accessible, if blocked already.
Steps: (Block USB Storage Devices)
- Login to SureMDM Console.
- Navigate to Jobs > New Jobs > macOS > Runscript > USB Media Control > Select Block USB Storage Devices > Click on Insert > Click on Save:
- Once the runscript is saved, deploy the same on the device that requires USB storage to be blocked.
Conclusion
By leveraging the Run Script feature in SureMDM, administrators can centrally manage USB storage access on macOS devices without requiring manual intervention on individual endpoints. Blocking USB devices helps enhance data security and prevent unauthorized file transfers, while the unblock option provides flexibility when USB access is required for business operations. This approach enables organizations to maintain better control and security compliance across their managed macOS environment.
Need more help? Here’s how to get help from our experts.