Skip to main content
Question

Disable Mac address randomization script macOS 15.6 and above

  • August 20, 2025
  • 8 replies
  • 465 views

rstallingsiii
Forum|alt.badge.img

We have a script to disable the macOS randomization, it’s been working prior to macOS 15.6.  Since  15.6 it has not worked, it also does not work on the beta of Tahoe.  

The script would hard code the MAC randomization to OFF, and set the default for all new networks to “NOT SET” which then becomes “OFF”.

Has anyone else experienced issues with MAC randomization on 15.6 or the Tahoe beta? 

8 replies

talkingmoose
Forum|alt.badge.img+36
  • Community Manager
  • August 21, 2025

Is there a reason you’re using a script for this and not a configuration profile? Apple has made this a manageable setting in the Network payload of computer configuration profiles.


dmccluskey
Forum|alt.badge.img+8
  • Valued Contributor
  • August 21, 2025

is this the one you are using?

 

sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1


Chubs
Forum|alt.badge.img+21
  • Jamf Heroes
  • August 21, 2025

Is there a reason you’re using a script for this and not a configuration profile? Apple has made this a manageable setting in the Network payload of computer configuration profiles.

This is the answer.  Use a preconfigured profile.  Done and done.


rstallingsiii
Forum|alt.badge.img
  • Author
  • New Contributor
  • August 21, 2025

Is there a reason you’re using a script for this and not a configuration profile? Apple has made this a manageable setting in the Network payload of computer configuration profiles.

Yes, the goal is to limit the randomization on any network the macbooks join, new and currently saved.  My understanding is the a configuration profile would only work on currently managed networks not new networks as well.  The script is based off of ​@brunerd ‘s script to set the private mac address mode.

 

 

 


sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • August 22, 2025

@rstallingsiii Evidence suggest that Apple no longer supports the PrivateMACAddressModeSystemSetting key to globally disable MAC address randomization, much like they’re removing the ability to get the active Wi-Fi SSID via a shell script, and the odds of that working again in the future are pretty slim.

If you’re managing a Wi-Fi configuration via a Configuration Profile Network payload as ​@talkingmoose references then you have still have option to disable MAC address randomization for that network, and that is the only supported (i.e. likely to keep working) way.


thebrucecarter
Forum|alt.badge.img+15

Just to jump on the bandwagon, we changed this to a Configuration Profile as well.  More and more items are not manageable via script anymore.  I don’t know if that is good or bad, it just is…   🤓


ktrojano
Forum|alt.badge.img+20
  • Jamf Heroes
  • August 27, 2025

We use a config profile as well.


pete_c
Forum|alt.badge.img+16
  • Honored Contributor
  • August 28, 2025

If you really want to disable MAC randomization globally, file Feedback and explain why it would be beneficial to your users or organization.

Given that MAC randomization is designed to enhance user privacy, I seriously doubt Apple will ever (re-)enable this.