At the moment it seems that JAMF is unable to turn off private wifi addresses via configuration policy even though they have an option for "Disable MAC Address Randomization (macOS 15 or later)". After testing with JAMF and confirming this function does not work in setting this to OFF (there currently are no granular settings in the MDM framework for this), they recommended I raise a developer case with Apple for this. Shouldn't JAMF be doing this to allow this functionality in their MDM instead of us as a user?? Our vendor is incredibly upset and recommending we drop JAMF as a product due to their response on this.
Shouldn't JAMF raise bugs with Apple for its MDM Framework instead of us?
+6
+36Jamf can only manage what Apple makes available to manage.
If you have devices that aren’t respecting the setting to disable MAC address randomization, Apple will need to address this with an operating system update.
Jamf reports significant issues using its contacts with Apple, especially those issues that may impact security. But if customers also report to Apple, their priority for fixing it goes up.
All vendors use the same MDM specifications Apple provides. If Jamf’s management abilities are affected, so are everyone else’s.
+5From my understanding, Apple prioritizes quality, user feedback. So if Apple users / customers start submitting feedback for this and how it impacts them, then it is more likely to get some attention.
+25
At one time there was an un-documented setting that could be applied to disable MAC address randomization in general, but it stopped working around macOS 15.7 as I recall.
+22From my understanding, Apple prioritizes quality, user feedback. So if Apple users / customers start submitting feedback for this and how it impacts them, then it is more likely to get some attention.
+7It is also good to bring things to your Apple SE and they are sometimes able to ask their other customers which they can then tell engineers that they have multiple customers having an issue and add some pressure to the proper internal teams.
+6From my understanding, Apple prioritizes quality, user feedback. So if Apple users / customers start submitting feedback for this and how it impacts them, then it is more likely to get some attention.
Can you point me to where I can open a technical case with Apple? Jamf have given me a link for where developers can open cases (but I am unable to as I don’t have access to the tools the developers use to do this)
+1Just to add to this:
For iPadOS 26.5.2: behaviour has changed from iPadOS 26.2.1 for a Configuration Profile's Wi-FI payload "Disable MAC Address Randomization" setting.
It retains the iPad's "Private Wi-Fi Address" setting, but user is able to change it.
Normally the iPad's "Private Wi-Fi address" setting can not be changed.
This is a potential major issue with tracking iPads in schools' or other large iPad fleets from the onboard MAC address.
Reproducing the issue means using a managed iPad with a Configuration Profile with the Wi-Fi payload "Disable MAC Address Randomization" set to true, and updating it from iPadOS 26.2.1 to 26.5.2.
Or applying the Configuration Profile to an iPad with iPadOS 26.5.2.
NOTE: I have not tested multiple OS increments to determine when this changed.
To lodge an issue with Apple, use the Feeback Assistant from your Apple Developer account. If you have an Apple School Manager or Business Manager account you can sign up with that for free.
+1Just to add to this:
For iPadOS 26.5.2: behaviour has changed from iPadOS 26.2.1 for a Configuration Profile's Wi-FI payload "Disable MAC Address Randomization" setting.
It retains the iPad's "Private Wi-Fi Address" setting, but user is able to change it.
Normally the iPad's "Private Wi-Fi address" setting can not be changed.
This is a potential major issue with tracking iPads in schools' or other large iPad fleets from the onboard MAC address.
Reproducing the issue means using a managed iPad with a Configuration Profile with the Wi-Fi payload "Disable MAC Address Randomization" set to true, and updating it from iPadOS 26.2.1 to 26.5.2.
Or applying the Configuration Profile to an iPad with iPadOS 26.5.2.
NOTE: I have not tested multiple OS increments to determine when this changed.
To lodge an issue with Apple, use the Feeback Assistant from your Apple Developer account. If you have an Apple School Manager or Business Manager account you can sign up with that for free.
Also now checked iPadOS 26.4.1, which has the same issue - user can change “Private Wi-Fi Address” setting.
iPadOS 26.3 not tested as yet.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.