Skip to main content
Solved

Block Photos in iCloud Setting in macOS

  • September 9, 2021
  • 6 replies
  • 34 views

Forum|alt.badge.img+6

We've disabled all iCloud settings for all Macs.

Restrictions > Functionality > All Allow ICloud are unchecked.

On the Mac we're still seeing access to Photos.  How is Photos access disabled?

 

Best answer by edward_stewart

From what I can tell, Jamf hasn't implemented the MDM payload to restrict iCloud photos in their Pro product yet, although it is listed as an available restriction in their Jamf Now documentation. There are two feature requests to add this functionality, which you could upvote:

Add allowCloudPhotoLibrary into your restrictions section

Missing MDM payload: allowCloudPhotoLibrary

Both feature request pages list a custom setting payload, which you could try (untested by me):

 

<dict> <key>PayloadDescription</key> <string>Configures restrictions</string> <key>PayloadDisplayName</key> <string>Restrictions</string> <key>PayloadIdentifier</key> <string>com.apple.applicationaccess</string> <key>PayloadOrganization</key> <string>Jimmy Swings</string> <key>PayloadType</key> <string>com.apple.applicationaccess</string> <key>PayloadUUID</key> <string></string> <key>PayloadVersion</key> <integer>1</integer> <key>allowCloudPhotoLibrary</key> <false/> </dict>

 

 

6 replies

akw0045
Forum|alt.badge.img+9
  • Contributor
  • 19 replies
  • September 9, 2021

If you don't need the photos app, you could try blocking it from running in the restricted software section of Jamf.


Forum|alt.badge.img+6
  • Author
  • Contributor
  • 45 replies
  • September 9, 2021

Would like to use Photos to manage and edit the photos on the Mac.  Just do not want Photos to talk to iCloud.  


Forum|alt.badge.img+3
  • New Contributor
  • 3 replies
  • Answer
  • September 10, 2021

From what I can tell, Jamf hasn't implemented the MDM payload to restrict iCloud photos in their Pro product yet, although it is listed as an available restriction in their Jamf Now documentation. There are two feature requests to add this functionality, which you could upvote:

Add allowCloudPhotoLibrary into your restrictions section

Missing MDM payload: allowCloudPhotoLibrary

Both feature request pages list a custom setting payload, which you could try (untested by me):

 

<dict> <key>PayloadDescription</key> <string>Configures restrictions</string> <key>PayloadDisplayName</key> <string>Restrictions</string> <key>PayloadIdentifier</key> <string>com.apple.applicationaccess</string> <key>PayloadOrganization</key> <string>Jimmy Swings</string> <key>PayloadType</key> <string>com.apple.applicationaccess</string> <key>PayloadUUID</key> <string></string> <key>PayloadVersion</key> <integer>1</integer> <key>allowCloudPhotoLibrary</key> <false/> </dict>

 

 


boberito
Forum|alt.badge.img+22
  • Jamf Heroes
  • 451 replies
  • September 11, 2021

The MDM payload for disabling photos is broken and has been for many major versions of the system(maybe as far back as 10.13).  Despite endless feedback and enterprise tickets this has never been resolved.  

I want to say it may be fixed in Monterey but it regresses every so often so who knows.  


Forum|alt.badge.img+6
  • Author
  • Contributor
  • 45 replies
  • October 23, 2021

Wanted to see what Jamf had to say on this issue too.  Here's is their answer,

Currently Jamf Pro doesn't natively have this setting. It also looks like Apple does have an issue with the key "allowCloudPhotoLibrary = False" as well. Apple is working to have this fixed with macOS Monterey. In their testing with beta 7 its working. On Jamf's side I'm not sure when this will be added as a restriction.


Forum|alt.badge.img
  • New Contributor
  • 1 reply
  • July 18, 2022

Wanted to see what Jamf had to say on this issue too.  Here's is their answer,

Currently Jamf Pro doesn't natively have this setting. It also looks like Apple does have an issue with the key "allowCloudPhotoLibrary = False" as well. Apple is working to have this fixed with macOS Monterey. In their testing with beta 7 its working. On Jamf's side I'm not sure when this will be added as a restriction.


Hello,

Any official news with this issue?

Thank you!