Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

Finder (com.apple.finder)

com.apple.finder

The payload that configures Finder settings.

macOS(10.7)
Branch: release

Settings (9)

SettingTypeRequiredDefaultManual InstallSupported OS
ProhibitBurn
ProhibitBurn
If `true`, the system disables the Finder's burn support.
booleanoptionalfalse
✓Yes
macOS (10.7+)
ProhibitConnectTo
ProhibitConnectTo
If `true`, the system disables Connect to Server.
booleanoptionalfalse
✓Yes
macOS (10.7+)
ProhibitEject
ProhibitEject
If `true`, the system disables Eject.
booleanoptionalfalse
✓Yes
macOS (10.7+)
ProhibitGoToFolder
ProhibitGoToFolder
If `true`, the system disables Go to Folder.
booleanoptionalfalse
✓Yes
macOS (10.7+)
ShowExternalHardDrivesOnDesktop
ShowExternalHardDrivesOnDesktop
If `false`, the system doesn't show external hard drives on the Desktop.
booleanoptionaltrue
✓Yes
macOS (10.7+)
ShowHardDrivesOnDesktop
ShowHardDrivesOnDesktop
If `false`, the system doesn't show internal hard drives on the Desktop.
booleanoptionalfalse
✓Yes
macOS (10.7+)
ShowMountedServersOnDesktop
ShowMountedServersOnDesktop
If `false`, the system doesn't show mounted file servers on the Desktop.
booleanoptionalfalse
✓Yes
macOS (10.7+)
ShowRemovableMediaOnDesktop
ShowRemovableMediaOnDesktop
If `false`, the system doesn't show removable media items on the Desktop.
booleanoptionaltrue
✓Yes
macOS (10.7+)
WarnOnEmptyTrash
WarnOnEmptyTrash
If `false`, the system doesn't warn the user before emptying the trash.
booleanoptionaltrue
✓Yes
macOS (10.7+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information