UCF STIG Viewer Logo

The prompt for Apple ID and iCloud must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-58433 AOSX-09-001125 SV-72863r1_rule Medium
Description
The prompt for Apple ID and iCloud must be disabled, as it might mislead new users into creating unwanted Apple IDs and iCloud storage accounts upon their first login.
STIG Date
Apple OS X 10.9 (Mavericks) Workstation Security Technical Implementation Guide 2017-01-05

Details

Check Text ( C-59259r1_chk )
To check if the prompt for Apple ID and iCloud are disabled for new users, run the following command:

sudo defaults read /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant

If there is no result, or the results do not include 'DidSeeCloudSetup = 1 AND LastSeenCloudProductVersion = 10.9', this is a finding.
Fix Text (F-63747r1_fix)
To ensure that the prompt for Apple ID and iCloud is disabled, run the following commands:

sudo defaults write /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant DidSeeCloudSetup -bool TRUE; sudo defaults write /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant LastSeenCloudProductVersion '10.9'