Managed computers which need to restrict ability to write to external USB media can do so via a Configuration Profile.


  1. Log into the Casper JSS. (
  2. Make sure you are in your site from the pull down at the top of the screen.
  3. Choose Configuration Profiles from the left pane in the JSS.
  4. Click the “+” (New) button and name your profile and configure the options in the “General” field.
    1. Set “Distribution Method” to “Install Automatically”
    2. Set “Level” to “Computer Level”

  5. Choose the “Restrictions” option to view it’s pane.

  6. Click the “Media” tab across the top of the Restrictions window.
  7. Under the “External Disks:” option check the “Read-Only” box to restrict devices to read only.
  8. Under the “Scope” tab select the computers or computer groups to apply this Configuration Policy.
Article number: 
Last updated: 
March 16, 2018