Skip to main content
Question

Block macOS Public Beta Access Utility

  • August 6, 2020
  • 2 replies
  • 36 views

Forum|alt.badge.img+12

Some of our users have admin access on their systems.

What's the best way to block macOSPublicBetaAccessUtility.pkg?

I can't block it under restrictions as a process. That would be the installer process ...

Any input on ensuring beta profiles are not installed would be appreciated.

2 replies

sdagley
Forum|alt.badge.img+25
  • Jamf Heroes
  • August 6, 2020

@k3vmo The utility just modifies the seedutil setting on the Mac. This command will read the current seedutil setting:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil current | awk '/enrolled/{print $NF}'

You can wrap that as an EA to see who has used the utility. If the Mac isn't enrolled the response will be (null)

For any that don't return (null), you can use the following command to unenroll them:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil unenroll


donmontalvo
Forum|alt.badge.img+36
  • Hall of Fame
  • November 3, 2021

@k3vmo The utility just modifies the seedutil setting on the Mac. This command will read the current seedutil setting:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil current | awk '/enrolled/{print $NF}'

You can wrap that as an EA to see who has used the utility. If the Mac isn't enrolled the response will be (null)

For any that don't return (null), you can use the following command to unenroll them:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil unenroll


@sdagley works with Monterey, kudos!