MacBook Restrictions Profile
Would anyone be willing to share any profiles you've customized to restrict student devices from accessing certain areas of their MacBooks? We're hoping to see if there's anything specific we should be blocking and to hopefully make improvements to our management approach. Backstory: The school did not have profiles in place, which allowed students unrestricted access to their devices for years. A few months ago, I implemented a profile with restrictions, and it has helped prevent students from altering several settings. However, we are still in the early stages (still learning Jamf) and are allowing access to certain features, such as: Downloading Apps from anywhere (music department has an app that won't download if we restrict this to Apple and trusted developers) - potential workaround is to package the app and deploy via Jamf as an in-house app and then restrict app downloads again at the end of the school year. Allowing all iCloud settings for managed Apple ID access (our Ed Tech
