Block macOS Public Beta Access Utility

k3vmo
Contributor

Some of our users have admin access on their systems.

What's the best way to block macOSPublicBetaAccessUtility.pkg?

I can't block it under restrictions as a process. That would be the installer process ...

Any input on ensuring beta profiles are not installed would be appreciated.

1 REPLY 1

sdagley
Honored Contributor II

@k3vmo The utility just modifies the seedutil setting on the Mac. This command will read the current seedutil setting:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil current | awk '/enrolled/{print $NF}'

You can wrap that as an EA to see who has used the utility. If the Mac isn't enrolled the response will be (null)

For any that don't return (null), you can use the following command to unenroll them:

/System/Library/PrivateFrameworks/Seeding.framework/Resources/seedutil unenroll