Problem that read-only of Directory service Media Management is canceled.

I have an issue where Directory service media read-only is disabled on macOS 11 and later. Media Management settings are below.

file=mcxsetup.plist

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.systemuiserver</key> <dict> <key>mount-controls</key> <dict> <key>state</key> <string>always</string> <key>value</key> <dict> <key>harddisk-external</key> <array> <string>read-only</string> </array> </dict> </dict> </dict> </dict> </plist>

Operating procedure.

(1) The login account is admin. (2) Place mcxsetup.plist in /Users/admin folder. (3) Execute the following in the terminal command.

$ sudo dscl . -mcximport /Users/admin /Users/admin/mcxsetup.plist

(4) Run the following command in the terminal and confirm that the value is set.

$ dscl . -mcxexport /Users/admin

(4) restart mac (5) login admin (6) Mount USB storage (7) Make sure the USB storage is set to Read Only. (8) admin logout (9) Login with account name=admin (10) USB storage becomes writable

Question: (1) Have there been any specification changes since macOS 11? (2) Is it not possible to use it in local environment? (3) does anyone know a workaround?

  • Configuration-Profile-Reference URL

https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf