Removable storage device protection rules, unlike plug-and-play device rules, have a read-only option.
By setting removable devices to read-only, you can allow users to use their personal devices as MP3 players while preventing their use as storage devices.
In ePO - SaaS, select Menu → Data Protection → DLP Policy Manager.
On the Definitions tab, on Device Templates page, create a removable storage device template item.
Note
Removable storage device templates must be categorized as Windows or Mac templates. Start by duplicating one of the built-in templates for Windows or Mac and customize it. The Bus Type can include USB, Bluetooth, and any other bus type you expect to be used. Identify devices with vendor IDs or device names.
On the Rule Sets tab, select or create a rule set.
On the Device Control tab, select Actions → New Rule → Removable Storage Device Rule.
Enter a name for the rule and select State → Enabled. In the Conditions section, in the Removable Storage field, select the device template item you created in step 2.
On the Reaction tab, select Action → Read-only. You can optionally add a user notification, select the Report Incident option, or select a different action when the user is disconnected from the corporate network.
Click Save, then click Close.