Ensure iCloud Drive Document and Desktop Sync Is Disabled

MediaNivel 2Automatizadamacos

Descripción

With macOS 10.12, Apple introduced the capability to have a user's Desktop and Documents folders automatically synchronize to the user's iCloud Drive, provided they have enough room purchased through Apple on their iCloud Drive. This capability mirrors what Microsoft is doing with the use of OneDrive and Office 365. There are concerns with using this capability.

Cómo se verifica

Método de auditoría: Comando de shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowCloudDesktopAndDocuments').js
EOS

Salida esperada: false

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.applicationaccess allowCloudDesktopAndDocuments = <false/>.

Propiedades

Sistemas operativos: macos-26
Etiquetas: macossystem-settings
Referencia: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.1.1.3 Ensure iCloud Drive Document and Desktop Sync Is Disabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos --level 2