Skip to main content
Question

Disable Apple ID in Ventura

  • Aug 2, 2023 8:11 PM UTC
  • 16 replies
  • 267 views
YanW
Forum|alt.badge.img+11
  • YanW
  • Valued Contributor

We have Configuration Profile to disable Apple ID in System Settings.

 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>DisabledSystemSettings</key> <array> <string>com.apple.systempreferences.AppleIDSettings</string> </array> </dict> </plist>

 

It works some of the time. I made sure the devices don't have pending or failed commands. Some times require a simple restart but most of the time require pushing the profile out again, inventory update, or send blank push. What am I missing?

    16 replies

    Forum|alt.badge.img+4
    • StefanT
    • Contributor
    • Aug 3, 2023 6:46 PM UTC

    Is there a reason you do these using a plist instead of the Restrictions in the configuration profile?

    Whats the preference domain for these so I could try it this way?

    YanW
    Forum|alt.badge.img+11
    • YanW
    • Author
    • Valued Contributor
    • Aug 3, 2023 7:19 PM UTC

    Is there a reason you do these using a plist instead of the Restrictions in the configuration profile?

    Whats the preference domain for these so I could try it this way?


    The Restrictions payload doesn't work on Ventura, so we use the com.apple.systempreferences. Everything works except Apple ID 

    Forum|alt.badge.img+4
    • StefanT
    • Contributor
    • Aug 3, 2023 7:26 PM UTC

    The Restrictions payload doesn't work on Ventura, so we use the com.apple.systempreferences. Everything works except Apple ID 


    Hm... I have turned of every i* option in the settings, and once they where turned off, the Apple ID turned to '"Sign in" is not Available'.

    Do your changes completly remove the Apple ID section?

    YanW
    Forum|alt.badge.img+11
    • YanW
    • Author
    • Valued Contributor
    • Aug 3, 2023 7:43 PM UTC

    Hm... I have turned of every i* option in the settings, and once they where turned off, the Apple ID turned to '"Sign in" is not Available'.

    Do your changes completly remove the Apple ID section?


    Not every time it get disabled right away. When it works, it says "Sign in" settings are not available. 

    I could use this to disable it. 

     

    defaults write "/Library/Preferences/com.apple.systempreferences" DisabledSystemSettings -array "com.apple.systempreferences.AppleIDSettings"

     

     I want to figure out why only Apple ID is having issue in Configuration Profile. 

    Forum|alt.badge.img+2
    • asobol2
    • New Contributor
    • Oct 14, 2023 1:29 AM UTC

    Hey, did you ever figure this out, having same issue

      YanW
      Forum|alt.badge.img+11
      • YanW
      • Author
      • Valued Contributor
      • Oct 16, 2023 2:22 PM UTC

      Hey, did you ever figure this out, having same issue


      Jamf Support acknowledge all methods didn't apply instantly and they didn't have any solutions. I'm using with the Plist/JSON profile with the "Apple ID Preference Pane" in Restriction payload. On top of that, also using the "defaults write "/Library/Preferences/com.apple.systempreferences" DisabledSystemSettings -array "com.apple.systempreferences.AppleIDSettings". We just have the users to restart the Mac after they create their local account. It get disabled after the restart. Still, had 1 user  managed to log into their AppleID. Shrug....

      Forum|alt.badge.img+2
      • kai_wang1
      • New Contributor
      • Dec 28, 2023 4:46 AM UTC

      Since update to 14.2.1, this plist doesn't work on some Mac, do you have similar issue reported?

        Forum|alt.badge.img+1
        • bsharp
        • New Contributor
        • Dec 28, 2023 5:35 PM UTC

        Since update to 14.2.1, this plist doesn't work on some Mac, do you have similar issue reported?


        It stopped working for us as well. 

        Forum|alt.badge.img+2
        • kai_wang1
        • New Contributor
        • Dec 29, 2023 1:52 AM UTC

        It stopped working for us as well. 


        Pls create one more profile as below. As i tested it works on 14.2.1

        com.apple.applicationaccess

        <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>allowAccountModification</key> <false/> </dict> </plist>

          Forum|alt.badge.img+3
          • peterGuyver
          • New Contributor
          • Jan 17, 2024 4:04 PM UTC

          Pls create one more profile as below. As i tested it works on 14.2.1

          com.apple.applicationaccess

          <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>allowAccountModification</key> <false/> </dict> </plist>


          This worked for me.
          Was previously using the plist config shown in the original post, but then it stopped working. But ONLY Apple ID stopped working.

          com.apple.systempreferences.AppleIDSettings

          Everything else was working fine. 

          Forum|alt.badge.img+2
          • kai_wang1
          • New Contributor
          • Jan 18, 2024 4:35 AM UTC

          This worked for me.
          Was previously using the plist config shown in the original post, but then it stopped working. But ONLY Apple ID stopped working.

          com.apple.systempreferences.AppleIDSettings

          Everything else was working fine. 


          Yes. From https://developer.apple.com/documentation/devicemanagement/restrictions we can know more detail.

          Forum|alt.badge.img+1
          • bsharp
          • New Contributor
          • Jan 22, 2024 12:34 PM UTC

          Pls create one more profile as below. As i tested it works on 14.2.1

          com.apple.applicationaccess

          <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>allowAccountModification</key> <false/> </dict> </plist>


          I did create the profile above, but it still did not work. However It did seem to fix itself with the Sonoma update and is working correctly again. 

          Forum|alt.badge.img+2
          • kai_wang1
          • New Contributor
          • Jan 23, 2024 3:23 AM UTC

          I did create the profile above, but it still did not work. However It did seem to fix itself with the Sonoma update and is working correctly again. 


           

           

          Yes, this key is only work on Sonoma.

           

          Forum|alt.badge.img+6

          Running Sonoma version 14.4.1 on a test machine now, this seems to be working kind of as intended?  I put a question mark in it because the pane is still open and you can put in an Apple ID and password.  However, after signing in, you are then told that the pane is blocked (as you would expect and how it looks in Ventura when first going to it).  When you leave System preferences, you are presented with the login window again...rinse and repeat.

          So, it seems the block is there, just not as well as it appeared in Ventura and earlier macOS versions.

            Forum|alt.badge.img+6

            Running Sonoma version 14.4.1 on a test machine now, this seems to be working kind of as intended?  I put a question mark in it because the pane is still open and you can put in an Apple ID and password.  However, after signing in, you are then told that the pane is blocked (as you would expect and how it looks in Ventura when first going to it).  When you leave System preferences, you are presented with the login window again...rinse and repeat.

            So, it seems the block is there, just not as well as it appeared in Ventura and earlier macOS versions.


            By the way, I'm not using any custom PLISTS.  I'm just using the Configuration profile setting to Disable the "Apple ID Preference Pane" Under the "Preferences" part of Restrictions.  I also have Allow Find My on iCloud BLOCKED under Functionality. 

            Forum|alt.badge.img+3
            • cosminnita
            • New Contributor
            • Aug 1, 2024 1:21 PM UTC

            By the way, I'm not using any custom PLISTS.  I'm just using the Configuration profile setting to Disable the "Apple ID Preference Pane" Under the "Preferences" part of Restrictions.  I also have Allow Find My on iCloud BLOCKED under Functionality. 


            This seems to be working sometimes, but sometimes it doesn't. Not sure how to restrict it 100%.

             

            For example, if you go to icloud drive in finder and click Open Apple id, that restrictions isn't there anymore..

            Terms & ConditionsAccessibility statement