Add managed preference to disable VM Shared Folders and other settings (MDM/enterprise control)

[DevliegereM]

Summary
Please add a managed configuration option that allows administrators to disable Shared Folders in VirtualBuddy via MDM-managed preferences.

Problem
In enterprise environments (especially regulated sectors), local host ↔ guest shared folder paths can bypass data handling controls and increase data exfiltration risk.

Today, we can block the app entirely, but we cannot allow VirtualBuddy while selectively disabling Shared Folders through MDM policy.

Requested capability
Add one or both of these controls:

• A managed preference key to disable shared folders globally
• Optional per-VM enforcement (if architecture supports it)

Example desired behavior:

• If policy is set, UI control for Shared Folders is hidden or disabled
• Existing shared folder mappings are ignored/blocked at runtime
• Attempted enablement is denied and surfaced in logs

Proposed managed key
Domain: codes.rambo.VirtualBuddy (or current production bundle domain)

Suggested key:

DisableSharedFolders (Boolean)
true: Shared Folders feature unavailable
false/default: current behavior

AllowedNetworkModes (Array of String)
valid values: NAT, Bridged
example: [ "NAT" ] to disallow Bridged

DefaultNetworkMode (String)
valid values: NAT, Bridged
used when creating new VMs

LockNetworkMode (Boolean)
true: user cannot change network mode from policy-defined value
false/default: user can change if mode is allowed

Optional stricter keys:

AllowSharedFolders (Boolean, default true)
RequireAdminToChangeSharedFolders (Boolean)

DisableBridgedNetworking (Boolean)
true: Bridged unavailable regardless of UI state

Why this matters
This would allow organizations to:

• Keep VirtualBuddy available for developer/test workflows
• Enforce security baseline controls without blocking the app completely
• Align with MDM governance and least-privilege endpoint standards

[DevliegereM]

I saw the new update coming out (2.1). Could we also implement restrictions on the remote SSH? @insidegui
Thanks for taking this into account!

[DevliegereM]

@insidegui I have some code that might help you out to implement this :). See attached files for more info (also have a plist and json file available for blocking the items). The plist has been renamed to XML so an upload can happen.

MDMPolicyChanges.md
VirtualBuddyJamfSchema.json
VirtualBuddyMDMPolicy.xml

I tried by downloading the source files and editing it myself and got positive results, only the Networking part seems to be a bit iffy.

[insidegui]

Thank you, but I've already built the underlying infrastructure for this and will be integrating it into the app soon 😄