Allowed Media and Menu Bar Extras

com.apple.systemuiserver

The payload that configures media management.

macOS

macOS 10.7+combined

Configuration Keys (5)

Key	Type	Title	Description	Default	Range
`PFC_SegmentedControl_0`required	string	—	—	—	—
`mount-controls` The media type dictionary that controls volume mounting.	dict	Volume Mount Controls	The media type dictionary that controls volume mounting.	—	—
`unmount-controls` The media type dictionary that controls volume unmounting.	dict	Volume Unmount Controls	The media type dictionary that controls volume unmounting.	—	—
`logout-eject` The media type dictionary that defines volumes to eject when the user logs out.	dict	Eject on logout	The media type dictionary that defines volumes to eject when the user logs out.	—	—
`menuExtras` List of menu extras to combine with the user's menu bar	array	Menu Extras	List of menu extras to combine with the user's menu bar	—	—
`harddisk-external` A string or an array of media action strings. Internally installed SD cards and USB flash drives are included in the hard disk-external category. This key is the default for media types that don't fall into other categories.	array	External Disk	A string or an array of media action strings. Internally installed SD cards and USB flash drives are included in the hard disk-external category. This key is the default for media types that don't fall into other categories.	—	—
`harddisk-internal` A media action string or an array of media action strings.	array	Internal Disk	A media action string or an array of media action strings.	—	—
`networkdisk` A media action string or an array of media action strings.	array	Network Disk	A media action string or an array of media action strings.	—	—
`disk-image` A media action string or an array of media action strings.	array	Disk Image	A media action string or an array of media action strings.	—	—
`bd` A media action string or an array of media action strings.	array	Blu-ray	A media action string or an array of media action strings.	—	—
`cd` A media action string or an array of media action strings.	array	CD	A media action string or an array of media action strings.	—	—
`dvd` A media action string or an array of media action strings.	array	DVD	A media action string or an array of media action strings.	—	—
`dvdram` A media action string or an array of media action strings.	array	DVD-RAM	A media action string or an array of media action strings.	—	—
`blankbd` A media action string or an array of media action strings.	array	Recordable Blu-ray	A media action string or an array of media action strings.	—	—
`blankcd` A media action string or an array of media action strings.	array	Recordable CD	A media action string or an array of media action strings.	—	—
`blankdvd` A media action string or an array of media action strings.	array	Recordable DVD	A media action string or an array of media action strings.	—	—
`all-media` Unused; set to an empty string.	string	—	Unused; set to an empty string.	—	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`harddisk-external` A string or an array of media action strings. Internally installed SD cards and USB flash drives are included in the hard disk-external category. This key is the default for media types that don't fall into other categories.	array	External Disk	A string or an array of media action strings. Internally installed SD cards and USB flash drives are included in the hard disk-external category. This key is the default for media types that don't fall into other categories.	—	—
`harddisk-internal` A media action string or an array of media action strings.	array	Internal Disk	A media action string or an array of media action strings.	—	—
`networkdisk` A media action string or an array of media action strings.	array	Network Disk	A media action string or an array of media action strings.	—	—
`disk-image` A media action string or an array of media action strings.	array	Disk Image	A media action string or an array of media action strings.	—	—
`bd` A media action string or an array of media action strings.	array	Blu-ray	A media action string or an array of media action strings.	—	—
`cd` A media action string or an array of media action strings.	array	CD	A media action string or an array of media action strings.	—	—
`dvd` A media action string or an array of media action strings.	array	DVD	A media action string or an array of media action strings.	—	—
`dvdram` A media action string or an array of media action strings.	array	DVD-RAM	A media action string or an array of media action strings.	—	—
`blankbd` A media action string or an array of media action strings.	array	Recordable Blu-ray	A media action string or an array of media action strings.	—	—
`blankcd` A media action string or an array of media action strings.	array	Recordable CD	A media action string or an array of media action strings.	—	—
`blankdvd` A media action string or an array of media action strings.	array	Recordable DVD	A media action string or an array of media action strings.	—	—
`all-media` Unused; set to an empty string.	string	—	Unused; set to an empty string.	—	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`harddisk-external` A string or an array of media action strings. Internally installed SD cards and USB flash drives are included in the hard disk-external category. This key is the default for media types that don't fall into other categories.	array	External Disk	A string or an array of media action strings. Internally installed SD cards and USB flash drives are included in the hard disk-external category. This key is the default for media types that don't fall into other categories.	—	—
`harddisk-internal` A media action string or an array of media action strings.	array	Internal Disk	A media action string or an array of media action strings.	—	—
`networkdisk` A media action string or an array of media action strings.	array	Network Disk	A media action string or an array of media action strings.	—	—
`disk-image` A media action string or an array of media action strings.	array	Disk Image	A media action string or an array of media action strings.	—	—
`bd` A media action string or an array of media action strings.	array	Blu-ray	A media action string or an array of media action strings.	—	—
`cd` A media action string or an array of media action strings.	array	CD	A media action string or an array of media action strings.	—	—
`dvd` A media action string or an array of media action strings.	array	DVD	A media action string or an array of media action strings.	—	—
`dvdram` A media action string or an array of media action strings.	array	DVD-RAM	A media action string or an array of media action strings.	—	—
`blankbd` A media action string or an array of media action strings.	array	Recordable Blu-ray	A media action string or an array of media action strings.	—	—
`blankcd` A media action string or an array of media action strings.	array	Recordable CD	A media action string or an array of media action strings.	—	—
`blankdvd` A media action string or an array of media action strings.	array	Recordable DVD	A media action string or an array of media action strings.	—	—
`all-media` Unused; set to an empty string.	string	—	Unused; set to an empty string.	—	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`ActionStringItem` One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: * authenticate - User will be authenticated before media is mounted * read-only - The media will be mounted read-only. Not valid for unmount-controls. * deny - The media will not be mounted. * eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`menuExtra` Range: /System/Library/CoreServices/Menu Extras/AirPort.menu, /System/Library/CoreServices/Menu Extras/Battery.menu, /System/Library/CoreServices/Menu Extras/Bluetooth.menu, /System/Library/CoreServices/Menu Extras/Clock.menu, /System/Library/CoreServices/Menu Extras/Displays.menu, /System/Library/CoreServices/Menu Extras/DwellControl.menu, /System/Library/CoreServices/Menu Extras/Eject.menu, /System/Library/CoreServices/Menu Extras/ExpressCard.menu, /System/Library/CoreServices/Menu Extras/Ink.menu, /System/Library/CoreServices/Menu Extras/IrDA.menu, /System/Library/CoreServices/Menu Extras/PPP.menu, /System/Library/CoreServices/Menu Extras/PPPoE.menu, /System/Library/CoreServices/Menu Extras/SafeEjectGPUExtra.menu, /System/Library/CoreServices/Menu Extras/Script, /System/Library/CoreServices/Menu Extras/Menu.menu, /System/Library/CoreServices/Menu Extras/TextInput.menu, /System/Library/CoreServices/Menu Extras/TimeMachine.menu, /System/Library/CoreServices/Menu Extras/UniversalAccess.menu, /System/Library/CoreServices/Menu Extras/User.menu, /System/Library/CoreServices/Menu Extras/VPN.menu, /System/Library/CoreServices/Menu Extras/Volume.menu, /System/Library/CoreServices/Menu Extras/WWAN.menu, /System/Library/CoreServices/Menu Extras/iChat.menu	string	Menu Extra Path	—	—