Disabling usb mass storage on apple devices?

Using the Profile Manager in Mac OS Server, you can manage many attributes of a flock of remote devices MacBooks, iPhones, iPads) associated with your Network, and share files from the server as well (or not) as you like. Below are the options for device management:

Restrict access to media

Media restrictions allow you to limit access to connected devices, such as volumes connected using USB, Thunderbolt, or FireWire and OS X Features such as AirDrop. You will need an external volume for this exercise.

1. Open the OS X Restrictions payload in Profile Manager.
2. Select the Media tab.
3. Uncheck AirDrop and Allow for External Disks.
4. Connect an external drive to your managed Mac using USB, Thunderbolt, or FireWire and verify that you can see the disk and open it, then eject the volume.
5. Open the Go menu in the Finder or look at the sidebar of any Finder window and verify that you see the AirDrop menu item.
6. Click the OK button in Profile Manager
7. Click the Save button in Profile Manager. Note that you may have to log out before these changes take effect.
8. Plug the external volume back into your Mac and note that it is no longer available.
9. Open the Disk Utility.
10. Note that your external volume is visible, but unavailable in Disk Utility.
11. Select the volume in Disk Utility and select the Mount button. Note that the volume still will not mount.

Using the Profile Manager is mac OS Server, you can manage many attributes of a flock of remote devices associated with your Network. below are the options for device management:

As a one-shot deal, you could use this:

Device Control: USB Lockdown for Windows, Mac, and Linux - Endpoint Protector ®

--------

In each case, you should have a company POLICY that no data gets written to any external devices unless the device is encrypted.

In each case, the users can not have Admin user accounts, or they can turn the features off in a heartbeat.

The solution depends on the reason for disabling those devices.