Allowed Media and Menu Bar Extras

com.apple.systemuiserver

The payload that configures media management.

macOS 10.7+ · deprecated 11.0

Not available with User Enrollment · Only one instance per profile

Configuration Keys (5)

Key	Type	Title	Description	Default	Range
`PFC_SegmentedControl_0`required	string	—	—	—	—
`mount-controls` The media type dictionary that controls volume mounting.	dict	Volume Mount Controls	The media type dictionary that controls volume mounting.	—	—
`harddisk-external` A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	array	External Disk	A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`harddisk-internal` A media action string or an array of media action strings.	array	Internal Disk	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`networkdisk` A media action string or an array of media action strings.	array	Network Disk	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`disk-image` A media action string or an array of media action strings.	array	Disk Image	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`bd` A media action string or an array of media action strings.	array	Blu-ray	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`cd` A media action string or an array of media action strings.	array	CD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`dvd` A media action string or an array of media action strings.	array	DVD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`dvdram` A media action string or an array of media action strings.	array	DVD-RAM	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankbd` A media action string or an array of media action strings.	array	Recordable Blu-ray	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankcd` A media action string or an array of media action strings.	array	Recordable CD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankdvd` A media action string or an array of media action strings.	array	Recordable DVD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`all-media` Unused; set to an empty string.	string	—	Unused; set to an empty string.	—	—
`unmount-controls` The media type dictionary that controls volume unmounting.	dict	Volume Unmount Controls	The media type dictionary that controls volume unmounting.	—	—
`harddisk-external` A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	array	External Disk	A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`harddisk-internal` A media action string or an array of media action strings.	array	Internal Disk	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`networkdisk` A media action string or an array of media action strings.	array	Network Disk	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`disk-image` A media action string or an array of media action strings.	array	Disk Image	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`bd` A media action string or an array of media action strings.	array	Blu-ray	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`cd` A media action string or an array of media action strings.	array	CD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`dvd` A media action string or an array of media action strings.	array	DVD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`dvdram` A media action string or an array of media action strings.	array	DVD-RAM	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankbd` A media action string or an array of media action strings.	array	Recordable Blu-ray	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankcd` A media action string or an array of media action strings.	array	Recordable CD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankdvd` A media action string or an array of media action strings.	array	Recordable DVD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`all-media` Unused; set to an empty string.	string	—	Unused; set to an empty string.	—	—
`logout-eject` The media type dictionary that defines volumes to eject when the user logs out.	dict	Eject on logout	The media type dictionary that defines volumes to eject when the user logs out.	—	—
`harddisk-external` A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	array	External Disk	A string or an array of media action strings. The hard disk-external category includes internally installed SD cards and USB flash drives. This key is the default for media types that don't fall into other categories.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`harddisk-internal` A media action string or an array of media action strings.	array	Internal Disk	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`networkdisk` A media action string or an array of media action strings.	array	Network Disk	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`disk-image` A media action string or an array of media action strings.	array	Disk Image	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`bd` A media action string or an array of media action strings.	array	Blu-ray	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`cd` A media action string or an array of media action strings.	array	CD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`dvd` A media action string or an array of media action strings.	array	DVD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`dvdram` A media action string or an array of media action strings.	array	DVD-RAM	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankbd` A media action string or an array of media action strings.	array	Recordable Blu-ray	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankcd` A media action string or an array of media action strings.	array	Recordable CD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`blankdvd` A media action string or an array of media action strings.	array	Recordable DVD	A media action string or an array of media action strings.	—	—
`ActionStringItem` One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls. Range: Authenticate (authenticate), Read-Only (read-only), Deny (deny), Eject (eject), Alert (alert)	string	Action	One of the following values: authenticate - User will be authenticated before media is mounted read-only - The media will be mounted read-only. Not valid for unmount-controls. deny - The media will not be mounted. eject - The media will not be mounted and it will be ejected if possible. Note that some volumes are not defined as ejectable, so using the deny key may be the best solution. Not valid for unmount-controls.	—
`all-media` Unused; set to an empty string.	string	—	Unused; set to an empty string.	—	—
`menuExtras` List of menu extras to combine with the user's menu bar	array	Menu Extras	List of menu extras to combine with the user's menu bar	—	—
`menuExtra` Range: /System/Library/CoreServices/Menu Extras/AirPort.menu, /System/Library/CoreServices/Menu Extras/Battery.menu, /System/Library/CoreServices/Menu Extras/Bluetooth.menu, /System/Library/CoreServices/Menu Extras/Clock.menu, /System/Library/CoreServices/Menu Extras/Displays.menu, /System/Library/CoreServices/Menu Extras/DwellControl.menu, /System/Library/CoreServices/Menu Extras/Eject.menu, /System/Library/CoreServices/Menu Extras/ExpressCard.menu, /System/Library/CoreServices/Menu Extras/Ink.menu, /System/Library/CoreServices/Menu Extras/IrDA.menu, /System/Library/CoreServices/Menu Extras/PPP.menu, /System/Library/CoreServices/Menu Extras/PPPoE.menu, /System/Library/CoreServices/Menu Extras/SafeEjectGPUExtra.menu, /System/Library/CoreServices/Menu Extras/Script, /System/Library/CoreServices/Menu Extras/Menu.menu, /System/Library/CoreServices/Menu Extras/TextInput.menu, /System/Library/CoreServices/Menu Extras/TimeMachine.menu, /System/Library/CoreServices/Menu Extras/UniversalAccess.menu, /System/Library/CoreServices/Menu Extras/User.menu, /System/Library/CoreServices/Menu Extras/VPN.menu, /System/Library/CoreServices/Menu Extras/Volume.menu, /System/Library/CoreServices/Menu Extras/WWAN.menu, /System/Library/CoreServices/Menu Extras/iChat.menu	string	Menu Extra Path	—	—