"Block and Allow charge" and "Block and do not Allow charge" don't work as expected

Technical Articles ID: KB92458
Last Modified: 2023-05-30 05:48:20 Etc/GMT

Environment

Data Loss Prevention Endpoint (DLP Endpoint) - all supported versions

For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint.

Problem

When an iPhone is connected to the DLP installed system, Block and Allow charge and Block and do not Allow charge don't work as expected.

Cause

Internal storage is accessible when the phone is connected to the client system, so block doesn't work. Sometimes, the iPhone can charge even when Block and do not allow charge is selected.

The Block feature doesn't work if you don't have any Apple drivers installed on the client PC, or if the drivers aren't allowed to load from the domain GPO policies.

There are two scenarios:

Block and do not Allow charge
Block and Allow charge

If you have an Apple driver installed on the client system, there are no issues with either of the above scenarios.

If no Apple driver is on the client system:

Block and do not Allow charge—Block works, but charging might not work.
Block and Allow charge—Device storage isn't blocked. Storage is read-only, but the device can charge.

Solution

To resolve the issue, follow these steps:

Install Apple drivers. Apple drivers are embedded in the iTunes software. If you want to install the Apple drivers alone, extract the iTunes software and install them.
Confirm the Apple driver on the device manager: usbaapl64.inf and usbaapl.inf

Workaround

In some organizations, the drivers are disabled through GPO. Determine if WPD Devices Deny read access is set to not configured in GPO, User Configuration, Policies, Administrative templates, System, Removable Storage Access. Workgroup systems still work as expected.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

"Block and Allow charge" and "Block and do not Allow charge" don't work as expected

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

"Block and Allow charge" and "Block and do not Allow charge" don't work as expected

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title