Wondering the same...

@lacinda currently there is not way of doing this. The only thing you can do is proactively watch for it to be enabled. We have a script that runs on a users system every 5 mins to detect if its turned on. Then it alerts our security team.

Thanks, @GaToRAiD - mind sharing your script?

Look for the existence of the Mobile Documents folder in /Users/username/Library/Preferences. If that folder exists, then that is one way to tell if iCloud Drive is enabled. When iCloud Drive is turned off, that folder is deleted from the Mac.

You can script this and place it in an Extension Attribute (though it sounds like GaToRAiD is using a launchdaemon/launchagent). You can create a smart group and have it look for the results of the EA.

Rough draft, so test this EA:

#!/bin/sh



# if folder exists, then iCloud Drive is enabled



iCloudDriveFolder="~/Library/Preferences/Mobile Documents"



if [ -e "${iCloudDriveFolder}"  ]; then

    echo "<result>Enabled</result>"

else

    echo "<result>Disabled</result>"

fi