Page 1 of 1

Any way to override macOS profile access control?

PostPosted: Tue Aug 15, 2017 5:57 am
by Wingzero
So our IT has disabled iCloud Drive by using profiles, which are not removable at all. I don't know why our IT allow you to use any cloud drive but just disable iCloud Drive. This also disallow me to use some cool features about iCloud document sync, along with some 3rd apps that needs iCloud sync to check my account subscription.

I have found that apple describes all management keys here: https://developer.apple.com/library/con ... ction.html

So I created my own, something like:
Code: Select all
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
   <key>PayloadContent</key>
   <array>
      <dict>
         <key>PayloadDescription</key>
         <string>Enable icloud drive again</string>
         <key>PayloadDisplayName</key>
         <string>Enable icloud drive</string>
         <key>PayloadEnabled</key>
         <true/>
         <key>PayloadIdentifier</key>
         <string>9D267E54-297A-42E0-973E-A4207AFFC7FB</string>
         <key>PayloadOrganization</key>
         <string>Company Name Here</string>
         <key>PayloadType</key>
         <string>com.apple.applicationaccess</string>
         <key>PayloadUUID</key>
         <string>9D267E54-297A-42E0-973E-A4207AFFC7FB</string>
         <key>PayloadVersion</key>
         <integer>1</integer>
         <key>allowCloudDocumentSync</key>
         <true/>
      </dict>
   </array>
   <key>PayloadDescription</key>
   <string>Enable iCloud sync again</string>
   <key>PayloadDisplayName</key>
   <string>Enable iCloud sync again</string>
   <key>PayloadEnabled</key>
   <true/>
   <key>PayloadIdentifier</key>
   <string>F6C86CF1-5B68-433D-88A9-ACB6B73CBC44</string>
   <key>PayloadOrganization</key>
   <string>Company Name Here</string>
   <key>PayloadRemovalDisallowed</key>
   <false/>
   <key>PayloadScope</key>
   <string>System</string>
   <key>PayloadType</key>
   <string>Configuration</string>
   <key>PayloadUUID</key>
   <string>F6C86CF1-5B68-433D-88A9-ACB6B73CBC44</string>
   <key>PayloadVersion</key>
   <integer>1</integer>
</dict>
</plist>

However it does not work. The iCloud drive option is still greyed out.

Is there any way to override the access control to get my iCloud drive back?