Audit Universal Control Settings

NiedrigStufe 1Manuelle Prüfungmacos

Beschreibung

Universal Control is an Apple feature that allows Mac users to control multiple other Macs and iPads with the same keyboard, mouse, and trackpad using the same Apple Account. The technology relies on already available iCloud services, particularly Handoff. Universal Control simplifies the use of iCloud connectivity of multiple computers using the same Apple Account. This may simplify data transfer from organizationally-managed and personal devices. The use of the same iCloud account and Handoff is the underlying concern that should be evaluated. The use of the same keyboard or mouse across multiple devices does not by itself decrease organizational security. Universal Clipboard, a feature of Universal Control, allows any device using the same Apple Account to access the clipboard of any other devices using the same Apple Account. The use of devices together when some are organizationa...

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Graphical Method: Perform the following steps to verify a profile is installed that configures Universal Control: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has with com.apple.universalcontrol in Settings and has Disable set to your organization's parameters. Terminal Method: Run the following command to verify that a profile is installed that sets Universal Control to your organization's parameters: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.universalcontrol')\ .objectForKey('Disable').js EOS If the output is true, Universal Control is disabled. If it is false, then Universal Control is enabled.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.universalcontrol 2. The key to include is Disable 3. Set the key to <true/> or <false/> based on your organization's requirements Note: Since the profile method sets a system-wide setting and not a user-level one, the profile method is the preferred method. It is always better to set system-wide than per user. Note: If your organization is allowing Universal Control, your organization can still disable Universal Clipboard via a profile. To disable Universal Clipboard, create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.coreservices.useractivityd 2. The key to include is ClipboardSharingEnabled 3. Set the key to <false/>

Eigenschaften

Betriebssysteme: macos-14
Tags: loggingmacossonoma
Referenz: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.8.1 Audit Universal Control Settings