If the network is deployed with a Configuration Profile macOS will not allow you to remove it using the GUI. You can exclude the device from the Configuration Profile and delete the network remanence in the keychain if you need to delete it for some reason.
As far as being able to remove the network in terminal, a lot of Configuration Profiles can be bypassed with Terminal. Another example of this is being able to disable Gatekeeper with Terminal, even if it's force enabled with a Configuration Profile. More or less it's the right hand does not know what the left hand is doing, and not all of Apples teams are paying attention to what the MDM team is doing.
If the network is deployed with a Configuration Profile macOS will not allow you to remove it using the GUI. You can exclude the device from the Configuration Profile and delete the network remanence in the keychain if you need to delete it for some reason.
As far as being able to remove the network in terminal, a lot of Configuration Profiles can be bypassed with Terminal. Another example of this is being able to disable Gatekeeper with Terminal, even if it's force enabled with a Configuration Profile. More or less it's the right hand does not know what the left hand is doing, and not all of Apples teams are paying attention to what the MDM team is doing.
Thank you! 🙏 That is good to know!
Regarding the specific network being locked in (not able to "forget network") because it's scoped via a config profile, I don't remember this being the case in the past (though I am a new admin) but it seems like a year or two ago, even though we had the same type of WiFi Configuration profile where we added the cert, it did not lock it on devices to where you couldn't forget the network...is this a new macOS thing I missed?
Thank you again for the input!
