Block macOS Public Beta Access Utility

[k3vmo]

Some of our users have admin access on their systems.

What's the best way to block macOSPublicBetaAccessUtility.pkg?

I can't block it under restrictions as a process. That would be the installer process ...

Any input on ensuring beta profiles are not installed would be appreciated.

[sdagley]

@k3vmo The utility just modifies the seedutil setting on the Mac. This command will read the current seedutil setting:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil current | awk '/enrolled/{print $NF}'

You can wrap that as an EA to see who has used the utility. If the Mac isn't enrolled the response will be (null)

For any that don't return (null), you can use the following command to unenroll them:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil unenroll

[donmontalvo]

@sdagley works with Monterey, kudos!