Skip to content
Block iCloud Photo Library to Prevent iCloud Syncing using Intune

Block iCloud Photo Library to Prevent iCloud Syncing using Intune

Written By Anoop C Nair
Last Updated January 15, 2026
Posted In Intune
SHARE

Hey, let’s discuss about Block iCloud Photo Library to Prevent iCloud Syncing using Intune. This policy is used to turn off iCloud Photo Library on Apple devices. When it is off, users cannot save or sync their photos to iCloud. Photos that are not fully saved on the device will be deleted. It works on iPhones with iOS 9 or later and Mac computers with macOS 10.12 or later.

The main purpose of this policy is to stop photos from syncing to iCloud. It keeps personal or work photos from going to Apple’s cloud storage. This helps protect privacy and keeps company data safe. It also helps free up space on the device.

This policy is important because it protects company information. If employees use company phones, their work photos will not go to personal iCloud accounts. This prevents data leaks and keeps company files safe. It also saves internet data and storage space.

For example, a company can use this policy on all employee iPhones so work photos stay only on the device. The IT team can apply this rule using Microsoft Intune, which helps control and protect all company devices easily.

Patch My PC

Block iCloud Photo Library to Prevent iCloud Syncing using Intune

This helps the organization protect data and maintain control. It stops users from syncing photos to iCloud, which prevents company information from leaving the device. So, let’s look how to deploy this policy Configuration through Intune.

How this Policy helps Supervised Devices

This policy helps supervised devices by keeping company data and photos safe. It blocks users from syncing or uploading photos to iCloud, so no work information is shared outside the device. It also helps the organization keep full control over its managed devices. All supervised devices will follow the same security and privacy rules set by the company.

Create a Profile

First sign in to the Microsoft Intune admin center. Go to Devices and select Configuration profiles. Then click Create profile to open the profile creation window. Under Platform, choose iOS/iPadOS, and for the Profile type, select Settings catalog. After that, click Create to begin configuring your new policy.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.1
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.1

Basic Step

To begin configuring a policy in Intune, start with the Basics step. Here, we can add the name of the policy and give a brief description.

  • Name of the Policy: Allow Cloud Photo Library
  • Description: To Allow Cloud Photo Library
  • Platform: iOS/iPadOS
Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.2
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.2

Configuration Settings

In the Configuration settings tab, click the Add settings button to open the Settings picker.Type Photo Library or search the category Restrictions in the Search bar. Then Select the Allow Cloud Photo Library setting.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.3
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.3

Once you have selected Allow Cloud Photo Library and closed the Settings picker. You will see it on the Configuration page. Here we have only two settings True or False. By default, Cloud Photo Library will be set to True. If you want to allow these settings, click on the Next button.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.4
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.4

Block Cloud Photo Library Policy

If we Not allowed or don’t configure this policy, you can block the Cloud Photo Library policy by toggling the switch. Then you can click the Next button to proceed.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.5
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.5

Scope Tag

In Intune, Scope Tags are used to control who can view and modify a policy. The scope tag is not mandatory, so you can skip this section. It functions as a tool for organisation and access management, but assigning it is optional. Click Next if they’re not required for your setup.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.6
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.6

Assignment

In the Assignments tab, you choose the users or devices that will receive the policy by clicking Add Group under Include Group, select the group that you want to target (e.g HTMD Supervised Devices – iOS/iPadOs) and then click Next to continue.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.7
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.7

Review + Create

At the final Review + Create step, we see a summary of all configured settings for the new profile; after reviewing the details and making any necessary changes by clicking Previous. We click Create to finish, and a notification confirms that the “Allow Cloud Photo Library created successfully”.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.8
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.8

Monitoring Status

To view a policy’s status, go to Devices > Configuration in the Intune portal, select the policy (like Allow Cloud Photo Library), and check that the status shows Succeeded (1). Use manual sync in the Company Portal to speed up the process.

Block iCloud Photo Library to Prevent iCloud Syncing using Intune - Fig.9
Block iCloud Photo Library to Prevent iCloud Syncing using Intune – Fig.9

How to Check on End User Device

When this policy is successfully applied on an end user’s device, it can be seen in Settings > Photos. The iCloud Photos option will be off or greyed out, meaning the user cannot turn it on. This shows that the policy is active and working properly. It also ensures the device follows the organization’s security and privacy rules.

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM,  Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read