Allowed Media and Menu Bar Extras

com.apple.systemuiserver

The payload that configures media management.

macOS 10.7+ · deprecated 11.0

Not available with User Enrollment · Only one instance per profile

Configuration Keys (5)

Key	Type	Description	Default	Range
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`mount-controls`dict Volume Mount Controls	dict	The media type dictionary that controls volume mounting.	Default: —	Range: —
`harddisk-external`array External Disk	array	A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`harddisk-internal`array Internal Disk	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`networkdisk`array Network Disk	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`disk-image`array Disk Image	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`bd`array Blu-ray	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`cd`array CD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`dvd`array DVD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`dvdram`array DVD-RAM	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankbd`array Recordable Blu-ray	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankcd`array Recordable CD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankdvd`array Recordable DVD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`all-media`string	string	Unused; set to an empty string.	Default: —	Range: —
`unmount-controls`dict Volume Unmount Controls	dict	The media type dictionary that controls volume unmounting.	Default: —	Range: —
`harddisk-external`array External Disk	array	A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`harddisk-internal`array Internal Disk	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`networkdisk`array Network Disk	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`disk-image`array Disk Image	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`bd`array Blu-ray	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`cd`array CD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`dvd`array DVD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`dvdram`array DVD-RAM	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankbd`array Recordable Blu-ray	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankcd`array Recordable CD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankdvd`array Recordable DVD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`all-media`string	string	Unused; set to an empty string.	Default: —	Range: —
`logout-eject`dict Eject on logout	dict	The media type dictionary that defines volumes to eject when the user logs out.	Default: —	Range: —
`harddisk-external`array External Disk	array	A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`harddisk-internal`array Internal Disk	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`networkdisk`array Network Disk	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`disk-image`array Disk Image	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`bd`array Blu-ray	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`cd`array CD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`dvd`array DVD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`dvdram`array DVD-RAM	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankbd`array Recordable Blu-ray	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankcd`array Recordable CD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`blankdvd`array Recordable DVD	array	A media action string or an array of media action strings.	Default: —	Range: —
`ActionStringItem`string Action	string	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	Default: —	Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)
`all-media`string	string	Unused; set to an empty string.	Default: —	Range: —
`menuExtras`array Menu Extras	array	List of menu extras to combine with the user's menu bar	Default: —	Range: —
`menuExtra`string Menu Extra Path	string	—	Default: —	Range: /System/Library/CoreServices/Menu Extras/AirPort.menu, /System/Library/CoreServices/Menu Extras/Battery.menu, /System/Library/CoreServices/Menu Extras/Bluetooth.menu, /System/Library/CoreServices/Menu Extras/Clock.menu, /System/Library/CoreServices/Menu Extras/Displays.menu, /System/Library/CoreServices/Menu Extras/DwellControl.menu, /System/Library/CoreServices/Menu Extras/Eject.menu, /System/Library/CoreServices/Menu Extras/ExpressCard.menu, /System/Library/CoreServices/Menu Extras/Ink.menu, /System/Library/CoreServices/Menu Extras/IrDA.menu, /System/Library/CoreServices/Menu Extras/PPP.menu, /System/Library/CoreServices/Menu Extras/PPPoE.menu, /System/Library/CoreServices/Menu Extras/SafeEjectGPUExtra.menu, /System/Library/CoreServices/Menu Extras/Script, /System/Library/CoreServices/Menu Extras/Menu.menu, /System/Library/CoreServices/Menu Extras/TextInput.menu, /System/Library/CoreServices/Menu Extras/TimeMachine.menu, /System/Library/CoreServices/Menu Extras/UniversalAccess.menu, /System/Library/CoreServices/Menu Extras/User.menu, /System/Library/CoreServices/Menu Extras/VPN.menu, /System/Library/CoreServices/Menu Extras/Volume.menu, /System/Library/CoreServices/Menu Extras/WWAN.menu, /System/Library/CoreServices/Menu Extras/iChat.menu