USB Mass Storage block via InTune or InTune deployed app

Hi,

This is unfortunately note even remotely useful. First of all, I'm in Canada, so we can rule this solution out right away. Do you sell Mac devices only in US? (Rhetorical question).

Pardon the sarcasm but I see a lot of IT managers on Apple forums trying to manage their fleets of MacOS devices with globally adopted solutions like InTune, Workspace One or JAMF, and it feels like Apple simply doesn't care about enabling organizations to centrally manage their devices adequately.

Apple should listen to business needs, not tell business how they need to adapt to Apple. We can basically control every aspect of the Windows OS with modern MDMs. Why is Apple lagging so far behind?

Back to the topic. We are a service provider who has huge media and entertainment clients. We are subjected to security guidelines which we simply cannot apply on MacOS devices in a centralized way (e.g.: Block USB ports through a configuration/policy). Of course we can do some things with MDMs, but it's so restricted it's not even funny.

Imagine having to ask members of your IT team to go on each computer to change 1 setting that can be changed in 5 clicks centrally on Windows through MDM. That's like asking Ford to go back in time and build cars one by one, by hand.

If you can't provide a genuine, working solution to blocking USB mass storage devices on MacOS through ANY MDM out there, please send this up the chain so someone at Apple can wake up and realize there's still a million miles to go before meeting business needs of your clients.

If anyone else has constructive, working solutions, I'm all ears (or eyes...).

Thanks