+12I am looking for a way to fully disable Airdrop for CIS standard security reasons on our Macs, the typical
Best answer by boberito
You should be using a configuration profile to block airdrop.
https://github.com/usnistgov/macos_security/blob/main/rules/os/os_airdrop_disable.yaml
But also after disabling you may have to logout or restart in order to get rid of everything and fully disable it.
+31Yeah we block airdrop in the media restrictions and I think `sharingd` in the application firewall which is the bonjour process that Air Drop uses
+22You should be using a configuration profile to block airdrop.
https://github.com/usnistgov/macos_security/blob/main/rules/os/os_airdrop_disable.yaml
But also after disabling you may have to logout or restart in order to get rid of everything and fully disable it.
+12You should be using a configuration profile to block airdrop.
https://github.com/usnistgov/macos_security/blob/main/rules/os/os_airdrop_disable.yaml
But also after disabling you may have to logout or restart in order to get rid of everything and fully disable it.
Thank you for the link and info.
+6You should be using a configuration profile to block airdrop.
https://github.com/usnistgov/macos_security/blob/main/rules/os/os_airdrop_disable.yaml
But also after disabling you may have to logout or restart in order to get rid of everything and fully disable it.
How do the YAML files in the link you provided work with Jamf? I hope you can help me answer. Thank you very much
+12Here is the script to disable Airdrop, "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES" It does require user logout, login or reboot. Also FYI the config profile method is the best practice way of disabling this.
+6Can you please provide Bash script
+4Try executing "killall Finder" command after you execute "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES" command.
Its working for me and I no longer see Airdrop in Go Menu and if you try to access it from spotlight then it will show following error - The operation can't be completed because the item can't be found.
If you want to reenable it do the same process but with NO syntax in the default.write command
+7This code as a custom payload in a Config Profile will do it. Set the domain to: com.apple.applicationaccess
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>allowAirDrop</key>
<false/>
</dict>
</plist>
Set to "true" if you want to turn it on.
+3Try executing "killall Finder" command after you execute "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES" command.
Its working for me and I no longer see Airdrop in Go Menu and if you try to access it from spotlight then it will show following error - The operation can't be completed because the item can't be found.
If you want to reenable it do the same process but with NO syntax in the default.write command
Hi @nachiket_s thank you for your input. I cant get airdrop to disable for the life of me. Can you clarify exactly where I put "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES"
is this suppose to be added to a configuration profile or do I create a policy? if you can assist with the steps you took that would be amazing!
+4Hi @nachiket_s thank you for your input. I cant get airdrop to disable for the life of me. Can you clarify exactly where I put "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES"
is this suppose to be added to a configuration profile or do I create a policy? if you can assist with the steps you took that would be amazing!
This is my method which is working seamlessly for me..other users can try their own methods as well
1) New Macbooks without airdrop enabled already - Created a configuration profile to disable the airdrop button on all systems in inventory
2) For existing macbooks where airdrop shortcuts are already present in the finder--> Pushed the above profile on existing enrolled systems as well and created a smart group which detects the presence of about mentioned configuration profile and scoped this group with attached script to disable the airdrop completely and kill the finder process to remove the shortcuts.
3) Ask the user to log out and log in again
I have found that step 3 is necessary otherwise users can still access airdrop from finder shotcuts or spotlights
#!/bin/sh
## postinstall
tell application "Terminal"
activate
#do script "defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES" in window 1
#do script "killall finder" in window 1
quit
+7Has anyone found a good way to write an Extension Attribute to let someone know if Airdrop is enabled or disabled? I am having issues finding the plist I can parse that information
Is anyone aware of any script that can be added as a payload, or other alternative, to disable receiving within AirDrop? Our org is trying to implement a send-only policy, but to my knowledge this does not exist outside of individual AirDrop settings.
+5This code as a custom payload in a Config Profile will do it. Set the domain to: com.apple.applicationaccess
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>allowAirDrop</key>
<false/>
</dict>
</plist>
Set to "true" if you want to turn it on.
This did not work in Sonoma
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.