Skip to main content
Question

Extension Attributes for iCloud?

  • October 9, 2013
  • 2 replies
  • 38 views
M
Forum|alt.badge.img+7

I'm looking for a couple things, both related to iCloud. I work for a regulated company where we must disable the use of iCloud. In searching JAMFNation I've found some ways to stop the initial prompts/wizard for the users to login when their account is created. Though I need to take that a step further and actually turn this off. So here are the two things I'm looking for.
1) Does anyone have an Extension Attribute (Or other method) that would allow me to report who has already configured and maybe even logged into iCloud?

2) Does anyone have a working process as to how they are currently disabling this in their environment?

Thanks!
Bill

    2 replies

    M
    Forum|alt.badge.img+7
    • Millertime
    • Author
    • Contributor
    • October 9, 2013

    FOLLOW UP ==> We are currently disabling the 'iCloud' preference pane.

    N
    Forum|alt.badge.img+18
    • nessts
    • Valued Contributor
    • October 9, 2013

    we created a launch daemon that watches the icloud preference pane path and any time anything happens to that it chmod -R 000 the preference pane, this keeps them from using it, we also do that to the internet accounts etc. you could create another launch daemon to search users homes for the icloud preference file and delete it, or make sure it exists in your default user template with nothing in it, and then watch it, but thats gonna be a bit tricky. If the users have admin rights and are smart enough they can turn off the launch daemons.

    and there is this mobileconfig that will disable saving to icloud
    <?xml version="1.0" encoding="UTF-8"?>
    <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
    <plist version="1.0">
    <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadContent</key> <dict> <key>.GlobalPreferences</key> <dict> <key>Set-Once</key> <array> <dict> <key>mcx_data_timestamp</key> <date>2013-02-05T18:16:05Z</date> <key>mcx_preference_settings</key> <dict> <key>NSDocumentSaveNewDocumentsToCloud</key> <false/> </dict> </dict> </array> </dict> </dict> <key>PayloadEnabled</key> <true/> <key>PayloadIdentifier</key> <string>MCXToProfile.b61737b1-e3cc-4ea1-9ecd-dcb6c040dfc7.alacarte.customsettings.758618a7-6c79-4eab-a538-22cc99c64323</string> <key>PayloadType</key> <string>com.apple.ManagedClient.preferences</string> <key>PayloadUUID</key> <string>758618a7-6c79-4eab-a538-22cc99c64323</string> <key>PayloadVersion</key> <integer>1</integer> </dict> </array> <key>PayloadDescription</key> <string>Included custom settings:
    Turns off iCloud as the default save location</string> <key>PayloadDisplayName</key> <string>MCXToProfile: NSDocumentSaveNewDocumentsToCloud FALSE</string> <key>PayloadIdentifier</key> <string>org.macenterprise.DontSaveNewDocumentsToiCloud</string> <key>PayloadOrganization</key> <string></string> <key>PayloadRemovalDisallowed</key> <false/> <key>PayloadScope</key> <string>System</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>b61737b1-e3cc-4ea1-9ecd-dcb6c040dfc7</string> <key>PayloadVersion</key> <integer>1</integer>
    </dict>
    </plist>

    Terms & ConditionsCookie settingsAccessibility statement