Your employer has access to everything on your work computer. Why would you want that?
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Apple's iCloud File Sharing Left Ex-Employees With Access to Secret Documents
- Thread starter MacRumors
- Start date
- Sort by reaction score
visualseed
macrumors 65816
Seen this a lot. We've also had employees on family sharing and custodial accounts that were asking their parents or spouses for permission to install apps and access sites they needed for work. If they couldn't sort themselves out, they got issued an iPhone SE.
TVreporter
macrumors 68030
Mind boggling that this was ever allowed?
Most corporate work places issue a work phone or computer that’s closely monitored. I can’t think of any reason why Apple wouldn’t do the same which would include iCloud for work files. Turn the phone in when you leave.
Most corporate work places issue a work phone or computer that’s closely monitored. I can’t think of any reason why Apple wouldn’t do the same which would include iCloud for work files. Turn the phone in when you leave.
TVreporter
macrumors 68030
Mine does - a major note is on the log in screen stating we aren’t entitled to any privacy on the laptop.
If Apple does such a careless job managing their own data, why should we believe they keep customer data secret in iCloud?
Why would you ever want to mix your personal and work accounts?
insomniac86
macrumors 6502a
I believe that got abandoned.Maybe if they didn't kill this feature they announced years ago, this problem would have been solved:
Separate iCloud accounts for personal and work lives?
Did anything actually happen with this feature they talked about at WWDC? YouTube links to timecode 01:02:09. "Have separate icloud accounts for personal and work lives? It seemed like an interesting idea for iOS 13/Catalina, but I can't find anything about it being implemented or what...forums.macrumors.com
insomniac86
macrumors 6502a
You can only sign into two Apple ID's if you want to split out "Everything in iCloud" Vs Apple ID "Purchases".There are separate iCloud Accounts for Personal and Work. The work ones are called Managed Apple Accounts and can be integrated with an organization's SSO. BYOD iOS devices can sign into both at the same times.
About Managed Apple Accounts
Managed Apple Accounts have access to many Apple technologies, apps, and services. Some require a device with iOS 17, iPadOS 17, macOS 14, visionOS 1.1, or later.support.apple.com
A BYD device can't be signed into both your personal Apple ID and a Managed Apple ID. Therefore, you can't access 2 separate iCloud Drive accounts, or Photo Libraries, etc. You would need to share the data via the external share functionality. Which isn't the same as being signed in directly.
Out of Interest, how does everyone else manage their work and personal devices?
I just moved to separate laptop and phone for work but then i missed having my personal info with me at work (self employed). I also found i was just using work computer more when i was at home. i've now just moved back to having everything logged into personal with work emails just an added account. For finder i then just have a work folder under documents. for work photos i just leave them on the work phone synced to the cloud.
My only gripe is that while i can split my email, i can't log into notes on my work ID and personal at the same time as they are both iCloud accounts and it only allows one.
I find this encourages me to do more personally with my hobby of photography & listening to music etc.
I'm amazed that a big company like Apple allows mixing of personal stuff though.
I just moved to separate laptop and phone for work but then i missed having my personal info with me at work (self employed). I also found i was just using work computer more when i was at home. i've now just moved back to having everything logged into personal with work emails just an added account. For finder i then just have a work folder under documents. for work photos i just leave them on the work phone synced to the cloud.
My only gripe is that while i can split my email, i can't log into notes on my work ID and personal at the same time as they are both iCloud accounts and it only allows one.
I find this encourages me to do more personally with my hobby of photography & listening to music etc.
I'm amazed that a big company like Apple allows mixing of personal stuff though.
woolypants
macrumors 6502a
- Home Macs are on my personal account, using one of my personal email addresses.
- Work Mac is on its own account, using another of my personal email addresses.
- Both are in the same family, with my actual family members, so I can share apps and iCloud backup space.
I would not put anything personal in my work account, even though I have full control. For example, my employer uses profiles to enforce apps like antivirus. They scan all docs. I always assume that my employer can trivially see everything on my work Mac. I'm always shocked when people have personal bookmarks on their work computers that are seen during screen sharing in Teams calls. I anticipate at any moment somebody from IT might come along and take control of the computer.
il_teo77
macrumors regular
2 TB for an employee??? Family of four. 6TB.
I didn’t know Apple cheaped out on iCloud also for employees. That figure (2TB) is almost completely needed for work purposes. I thought Apple would give 6 tb at least.
Isn’t 2 tb the storage of the highest Apple one tier? They are sometimes really cheap there in Cupertino.
I didn’t know Apple cheaped out on iCloud also for employees. That figure (2TB) is almost completely needed for work purposes. I thought Apple would give 6 tb at least.
Isn’t 2 tb the storage of the highest Apple one tier? They are sometimes really cheap there in Cupertino.
it was launched in 2021.
Discover account-driven User Enrollment - WWDC21 - Videos - Apple Developer
Learn how User Enrollment helps you support “bring your own device” deployments in your business or enterprise environment. We'll explore...
Part of the separation is via MDM.
Account driven user enrollment is exactly what you are desiring here. Two iCloud accounts, one device, cryptographic separation. There are some limitation however, one big one is that you cannot have two copies of the same app, one within personal and the other in the work container.
Discover account-driven User Enrollment - WWDC21 - Videos - Apple Developer
Learn how User Enrollment helps you support “bring your own device” deployments in your business or enterprise environment. We'll explore...
Here is more about how two iCloud accounts can be utilized on the same BYOD device.
support.apple.com
Account-driven enrollment methods with Apple devices
Account-driven User Enrollment and account-driven Device Enrollment provide a seamless, secure way for users and organizations to set up Apple devices for work.
jms_uk
macrumors member
Surely, that depends on what one does? There are plenty of people who would need only a fraction of that for their work.
