Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

Disk Management:Settings ()

The declaration to configure disk management settings on the device.

macOS(15.0)
Branch: release

Settings (3)

SettingTypeRequiredDefaultManual InstallSupported OS
Restrictions
Restrictions
The restrictions for the disk.
2 subkeys
dictionaryoptional—
✓Yes
macOS (15.0+)
└─
External storage
ExternalStorage
Specifies the mount policy for external storage: - `Allowed`: The system can mount external storage that's read-write or read-only. - `ReadOnly`: The system can only mount read-only external storage. Note that external storage that's read-write won't be mounted read-only. - `Disallowed`: The system can't mount any external storage.
stringoptional—
✓Yes
macOS (15.0+)
└─
Network storage
NetworkStorage
Specifies the mount policy for network storage: - `Allowed`: The system can mount network storage that's read-write or read-only. - `ReadOnly`: The system can only mount read-only network storage. Note that network storage that's read-write won't be mounted read-only. - `Disallowed`: The system can't mount any network storage.
stringoptional—
✓Yes
macOS (15.0+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information