"Block and Allow charge" and "Block and do not Allow charge" do not work as expected

Technical Articles ID: KB92458
Last Modified: 12/22/2021

Environment

McAfee Data Loss Prevention (DLP) Endpoint—all supported versions

For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint.

Problem

When an iPhone is connected to the DLP installed system, Block and Allow charge and Block and do not Allow charge do not work as expected.

Cause

Internal storage is accessible when the phone is connected to the client system, so block does not work. Sometimes, the iPhone can charge even when Block and do not allow charge is selected.

The Block feature does not work if you do not have any Apple drivers installed on the client PC. Or, if the drivers are not allowed to load from the domain GPO policies.

There are two scenarios:

Block and do not Allow charge
Block and Allow charge

If you have an Apple driver installed on the client system, there are no issues with either of the above scenarios.

If no Apple driver is on the client system:

Block and do not Allow charge—Block works, but charging might not work.
Block and Allow charge—Device storage is not blocked. Storage is read-only, but the device can charge.

Solution

To resolve the issue, follow these steps:

Install Apple drivers. Apple drivers are embedded in the iTunes software. If you want to install the Apple drivers alone, extract the iTunes software and install them.
Confirm the Apple driver on the device manager: usbaapl64.inf and usbaapl.inf.

Workaround

In some organizations, the drivers are disabled through GPO. Determine if WPD Devices Deny read access is set to not configured in GPO, User Configuration, Policies, Administrative templates, System, Removable Storage Access. Workgroup systems still work as expected.

Affected Products

Configuration
Data Loss Prevention Endpoint 11.6.x
Data Loss Prevention Endpoint 11.4.x (EOL)

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

"Block and Allow charge" and "Block and do not Allow charge" do not work as expected

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

"Block and Allow charge" and "Block and do not Allow charge" do not work as expected

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title