How to configure macOS for Dropbox using Configuration Profiles
If you’re working with a large team that uses macOS and Dropbox, you may want to add some payloads to a Configuration Profile to automatically enable Dropbox features such as online-only files and the Dropbox badge.
This article lists each of the different payloads and which Dropbox features they enable.
Payload for full support of online-only files on macOS 12.3 and above
- Payload: Kernel Extension Policy (com.apple.syspolicy.kernel-extension-policy)
- Applies to: macOS 10.14 or later
This payload enables the Dropbox Sync Engine to create online-only files. Such files rely on a Kernel Extension (kext) component to function properly.
To simplify installing this component, you may deploy a macOS installer package containing the Dropbox Kernel Extension. In some cases, the end user may need to reboot their device to install this component.
Learn more about installing kernel extensions (kexts) in macOS Big Sur.
<key>AllowedKernelExtensions</key>
<dict>
<key>G7HH3F8CAK</key>
<array>
<string>com.getdropbox.dropbox.kext</string>
</array>
</dict>
<key>AllowedTeamIdentifiers</key>
<array>
<string>G7HH3F8CAK</string>
</array>
Payload for Dropbox badge and viewer info
- Payload: Privacy Preferences Policy Control (com.apple.TCC.configuration-profile-policy)
- Applies to: macOS 10.14 or later
This payload enables the Dropbox badge and viewer info features.
<key>Services</key>
<dict>
<key>Accessibility</key>
<array>
<dict>
<key>Allowed</key>
<true/>
<key>CodeRequirement</key>
<string>identifier "com.getdropbox.dropbox" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G7HH3F8CAK</string>
<key>Comment</key>
<string>Allow Dropbox to use the Accessibility API to record the current user's presence or display the Dropbox Badge for the files it manages.</string>
<key>Identifier</key>
<string>com.getdropbox.dropbox</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
</dict>
Payload for deleted warnings and error messages
- Payload: Privacy Preferences Policy Control (com.apple.TCC.configuration-profile-policy)
- Applies to: macOS 10.15 or later
This payload supports Dropbox warnings and messages to prevent unintentional deletions. By enabling this, the Dropbox desktop app can provide more accurate errors or messages when a user takes actions on files which involve their Trash, such as deleting files that are shared with others.
This access is the only way to enable this functionality on macOS 10.15 or later.
<key>Services</key>
<dict>
<key>SystemPolicyAllFiles</key>
<array>
<dict>
<key>Allowed</key>
<true/>
<key>CodeRequirement</key>
<string>identifier "com.getdropbox.dropbox" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = G7HH3F8CAK</string>
<key>Comment</key>
<string>Allow Dropbox to access the Trash to recover from accidental deletions.</string>
<key>Identifier</key>
<string>com.getdropbox.dropbox</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
</dict>
