How to configure macOS for Dropbox using Configuration Profiles

If you’re working with a large team that uses macOS and Dropbox, you may want to add some payloads to a Configuration Profile to automatically enable Dropbox features such as online-only files and the Dropbox badge.

This article lists each of the different payloads and which Dropbox features they enable.

Payload for full support of online-only files on macOS 12.3 and above

Payload: Kernel Extension Policy (com.apple.syspolicy.kernel-extension-policy)
Applies to: macOS 10.14 or later

This payload enables the Dropbox Sync Engine to create online-only files. Such files rely on a Kernel Extension (kext) component to function properly.

To simplify installing this component, you may deploy a macOS installer package containing the Dropbox Kernel Extension here. In some cases, installing this component can require the end-user to reboot their device.

Learn more about installing kernel extensions (kexts) in macOS Big Sur.

            <key>AllowedKernelExtensions</key>

<dict>

        <key>G7HH3F8CAK</key>

        <array>

                <string>com.getdropbox.dropbox.kext</string>

        </array>

</dict>

            <key>AllowedTeamIdentifiers</key>

<array>

        <string>G7HH3F8CAK</string>

</array>

Payload for Dropbox badge and viewer info

Payload: Privacy Preferences Policy Control (com.apple.TCC.configuration-profile-policy)
Applies to: macOS 10.14 or later

This payload enables the Dropbox badge and viewer info features.

            
<key>Services</key>
<dict>
    <key>Accessibility</key>
    <array>
            <dict>
                    <key>Allowed</key>
                    <true/>
                    <key>CodeRequirement</key>
                    <string>identifier "com.getdropbox.dropbox" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G7HH3F8CAK</string>
                    <key>Comment</key>
                    <string>Allow Dropbox to use the Accessibility API to record the current user's presence or display the Dropbox Badge for the files it manages.</string>
                    <key>Identifier</key>
                    <string>com.getdropbox.dropbox</string>
                    <key>IdentifierType</key>
                    <string>bundleID</string>
            </dict>
    </array>
</dict>

Payload for deleted warnings and error messages

Payload: Privacy Preferences Policy Control (com.apple.TCC.configuration-profile-policy)
Applies to: macOS 10.15 or later

This payload supports Dropbox warnings and messages to prevent unintentional deletions. By enabling this, the Dropbox application will be able to provide more accurate errors or messages when a user takes actions on files which involve their Trash, such as deleting files that are shared with others. This access is the only way to enable this functionality on macOS 10.15 or later.

            
<key>Services</key>
<dict>
    <key>SystemPolicyAllFiles</key>
    <array>
            <dict>
                    <key>Allowed</key>
                    <true/>
                    <key>CodeRequirement</key>
                    <string>identifier "com.getdropbox.dropbox" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G7HH3F8CAK</string>
                    <key>Comment</key>
                    <string>Allow Dropbox to access the Trash to recover from accidental deletions.</string>
                    <key>Identifier</key>
                    <string>com.getdropbox.dropbox</string>
                    <key>IdentifierType</key>
                    <string>bundleID</string>
            </dict>
    </array>
</dict>

How helpful was this article?