Skip to main content
Question

Disable Mac address randomization script macOS 15.6 and above

  • Aug 20, 2025 10:29 PM UTC
  • 8 replies
  • 1629 views

rstallingsiii
Forum|alt.badge.img+1

We have a script to disable the macOS randomization, it’s been working prior to macOS 15.6.  Since  15.6 it has not worked, it also does not work on the beta of Tahoe.  

The script would hard code the MAC randomization to OFF, and set the default for all new networks to “NOT SET” which then becomes “OFF”.

Has anyone else experienced issues with MAC randomization on 15.6 or the Tahoe beta? 

8 replies

talkingmoose
Forum|alt.badge.img+36
  • Community Manager
  • Aug 21, 2025 11:35 AM UTC

Is there a reason you’re using a script for this and not a configuration profile? Apple has made this a manageable setting in the Network payload of computer configuration profiles.


dmccluskey
Forum|alt.badge.img+9
  • Valued Contributor
  • Aug 21, 2025 4:30 PM UTC

is this the one you are using?

 

sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1


Chubs
Forum|alt.badge.img+26
  • Jamf Heroes
  • Aug 21, 2025 9:20 PM UTC

Is there a reason you’re using a script for this and not a configuration profile? Apple has made this a manageable setting in the Network payload of computer configuration profiles.

This is the answer.  Use a preconfigured profile.  Done and done.


rstallingsiii
Forum|alt.badge.img+1
  • Author
  • New Contributor
  • Aug 21, 2025 10:12 PM UTC

Is there a reason you’re using a script for this and not a configuration profile? Apple has made this a manageable setting in the Network payload of computer configuration profiles.

Yes, the goal is to limit the randomization on any network the macbooks join, new and currently saved.  My understanding is the a configuration profile would only work on currently managed networks not new networks as well.  The script is based off of ​@brunerd ‘s script to set the private mac address mode.

 

 

 


sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • Aug 22, 2025 3:11 AM UTC

​@rstallingsiii Evidence suggest that Apple no longer supports the PrivateMACAddressModeSystemSetting key to globally disable MAC address randomization, much like they’re removing the ability to get the active Wi-Fi SSID via a shell script, and the odds of that working again in the future are pretty slim.

If you’re managing a Wi-Fi configuration via a Configuration Profile Network payload as ​@talkingmoose references then you have still have option to disable MAC address randomization for that network, and that is the only supported (i.e. likely to keep working) way.


thebrucecarter
Forum|alt.badge.img+16

Just to jump on the bandwagon, we changed this to a Configuration Profile as well.  More and more items are not manageable via script anymore.  I don’t know if that is good or bad, it just is…   🤓


ktrojano
Forum|alt.badge.img+23
  • Jamf Heroes
  • Aug 27, 2025 11:15 PM UTC

We use a config profile as well.


pete_c
Forum|alt.badge.img+16
  • Honored Contributor
  • Aug 28, 2025 2:49 PM UTC

If you really want to disable MAC randomization globally, file Feedback and explain why it would be beneficial to your users or organization.

Given that MAC randomization is designed to enhance user privacy, I seriously doubt Apple will ever (re-)enable this.