The prompt for Apple ID and iCloud must be disabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-67719	AOSX-11-001125	SV-82209r1_rule		Medium

Description
The prompt for Apple ID and iCloud must be disabled, as it might mislead new users into creating unwanted Apple IDs and iCloud storage accounts upon their first log on.

STIG	Date
Apple OS X 10.11 Security Technical Implementation Guide	2018-01-04

Details

Check Text ( C-68285r1_chk )
To check if the prompt for "Apple ID" and "iCloud" are disabled for new users, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep SkipCloudSetup If "SkipCloudSetup" is not set to "1", this is a finding.

Fix Text (F-73833r1_fix)
This setting is enforced using the "Disable iCloud Policy" configuration profile.