MDM
Mobile Device Management Settings
- Welcome
- Join AppleSeed for IT
- What’s new
- MDM overview
- Payload best practices
-
- General
- Accessibility
- Active Directory Certificate
- AirPlay
- AirPlay Security
- AirPrint
- App Configuration
- Associated Domains
- Autonomous Single App Mode
- Calendar
- Mobile Data
- Certificates
- Certificate Transparency
- Conference Room Display
- Contacts
- Content Caching
- Custom
- Directory
- DNS Proxy
- Dock
- Domains
- Energy Saver
- Exchange ActiveSync (EAS)
- Exchange Web Services (EWS)
- Extensions
- Finder
- Fonts
- Global HTTP Proxy
- Google Accounts
- Home Screen Layout
- Identification
- Kernel Extension Policy
- LDAP
- Lock Screen Message
- Login Items
- Login Window
- Network Usage Rules
- Notifications
- Parental Controls
- Passcode
- Printing
- Privacy Preferences Policy Control
- Proxy
- SCEP
- Security & Privacy
- Single App Mode
- Single Sign-On
- Single Sign-On Extensions
- Smart Card
- Software Update
- Subscribed Calendars
- System Migration
- Time Machine
- TV Remote
- Web Clips
- Web Content Filter
- Xsan

macOS media MDM restrictions for Apple devices
You can manage media restrictions on Mac computers enrolled in a mobile device management (MDM) solution, such as restricting the way users interact with internal and external storage, CDs and DVDs, and disk images.
Access | Permissions | Introduced |
|---|---|---|
AirDrop | Allow or deny for the entire operating system | 10.13 |
Internal storage devices | Allow Require authentication Read-only | 10.7 |
External storage devices | Allow Require authentication Read-only | 10.7 |
Disk images | Allow Require authentication Read-only | 10.7 |
DVD-RAM | Allow Require authentication Read-only | 10.7 |
CDs and CD-ROMs | Allow Require authentication | 10.7 |
DVDs | Allow Require authentication | 10.7 |
Recordable discs | Allow Require authentication | 10.7 |
Eject the media when the user logs out | Allow or deny | 10.7 |
Thanks for your feedback.