Block login to iCloud

[Andixon]

Hi,

is there a way to block the iCloud login on Mac? My users are not allowed to log into their apple account with their work Macs, so I want to block the access completely.

Thanks!

[danlaw777]

setup a configuration profile and use the restrictions payload, look under the functionality tab and you can choose your options there. 

alternatively, you can use the device compliance feature and set it there as well as many other things. 

[Andixon]

I know the restrictions, but I need it so that the users can no longer log into their apple accounts at all. Best would be if they no longer saw the option in the settings.

What device compliance feature?

[danlaw777]

what verison of jamf pro are you running? 11.16 has the latest

[Andixon]

11.15.2 

Is the feature new with 11.16?

[danlaw777]

yep, AND you HAVE to have SSO setup to use it as well

[Andixon]

You mean like Jamf Connect?

[agungsujiwo]

Hi @Andixon ,

You can disable the icloud login menu in the system settings, so you can't log in,

The payload you use to configure restrictions on a device,

allowAccountModification

If false, the system disables modification of accounts such as Apple IDs and Internet-based accounts such as Mail, Contacts, and Calendar. Available in iOS 7 and later, macOS 14 and later, and watchOS 10 and later. Requires a supervised device in iOS and watchOS.
Default: true

change to false to disable

You can manage this through Jamf:
Jamf > Configuration Profile > Restrictions > Functionality

• Allow Internet Accounts modification in System Settings (macOS 14 or later, supervised)
  
  
  Result :
  
  

Note

If you're looking to hide the menu entirely, I haven't found a reliable method yet.

[Andixon]

Man, this would be perfect, but the fact that it also locks the page for Internet account may mean that it is not an option for me. But thank you very much, this is basically what I looked for.