Category filter

Configuration profile to disable iCloud Drive on macOS

iCloud Drive on macOS can be a useful feature for syncing files across devices, but it can also pose a security risk if sensitive data is uploaded to the cloud. Disabling iCloud Drive can prevent users from syncing files to iCloud, safeguarding this data on macOS devices. Deploy configuration profiles using Hexnode’s Deploy Custom Configuration feature.

Disclaimer:

The sample configuration profiles provided below are created using various profile creator applications.

Note:

This configuration profile is supported on Mac devices running macOS 10.11 and above.

Disable iCloud Drive

Here is a .plist file to disable iCloud Drive on your macOS devices:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>PayloadContent</key>
	<array>
		<dict>
			<key>PayloadDescription</key>
			<string></string>
			<key>PayloadDisplayName</key>
			<string>Restrictions</string>
			<key>PayloadEnabled</key>
			<true/>
			<key>PayloadIdentifier</key>
			<string>com.apple.applicationaccess.5D497485-F312-41E6-A868-B5B17F87CEE4</string>
			<key>PayloadOrganization</key>
			<string>Company Name Here</string>
			<key>PayloadType</key>
			<string>com.apple.applicationaccess</string>
			<key>PayloadUUID</key>
			<string>5D497485-F312-41E6-A868-B5B17F87CEE4</string>
			<key>PayloadVersion</key>
			<integer>1</integer>
			<key>allowCloudDocumentSync</key>
			<false/>
		</dict>
	</array>
	<key>PayloadDescription</key>
	<string>Prevents iCloud Drive and iCloud Document Sync from being enabled.</string>
	<key>PayloadDisplayName</key>
	<string>Disable iCloud Drive</string>
	<key>PayloadEnabled</key>
	<true/>
	<key>PayloadIdentifier</key>
	<string>macOS.C563382F-7DCA-4DCD-8BA6-E94DA1160B8E</string>
	<key>PayloadOrganization</key>
	<string>Company Name Here</string>
	<key>PayloadRemovalDisallowed</key>
	<false/>
	<key>PayloadScope</key>
	<string>System</string>
	<key>PayloadType</key>
	<string>Configuration</string>
	<key>PayloadUUID</key>
	<string>A7C77949-55A9-4EA3-9D30-8D994AF6A5BA</string>
	<key>PayloadVersion</key>
	<integer>1</integer>
</dict>
</plist>

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>PayloadContent</key>

<array>

<dict>

<key>PayloadDescription</key>

<key>PayloadDisplayName</key>

<string>Restrictions</string>

<key>PayloadEnabled</key>

<true/>

<key>PayloadIdentifier</key>

<string>com.apple.applicationaccess.5D497485-F312-41E6-A868-B5B17F87CEE4</string>

<key>PayloadOrganization</key>

<string>Company Name Here</string>

<key>PayloadType</key>

<string>com.apple.applicationaccess</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

<key>allowCloudDocumentSync</key>

</dict>

</array>

<key>PayloadDescription</key>

<string>Prevents iCloud Drive and iCloud Document Sync from being enabled.</string>

<key>PayloadDisplayName</key>

<string>Disable iCloud Drive</string>

<key>PayloadEnabled</key>

<true/>

<key>PayloadIdentifier</key>

<string>macOS.C563382F-7DCA-4DCD-8BA6-E94DA1160B8E</string>

<key>PayloadOrganization</key>

<string>Company Name Here</string>

<key>PayloadRemovalDisallowed</key>

<key>PayloadScope</key>

<string>System</string>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</plist>

Notes:

To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors.
Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across devices.
Ensure that you do not associate conflicting configurations with the devices.
Use wildcards to fetch key values from the portal.
It is recommended to manually validate the configuration profile on a system before executing it in bulk.
Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

Need more help?

Raise a Ticket

Ask Community

Chat With us