Posted on 07-31-2024 02:51 AM
I have a requirement were wanted to hide or uninstall below MacOS default application i.e. (Freeform, Mail, Messages, Music, TV, Stocks, Chess)
Is there any way I can achieve this?
Solved! Go to Solution.
07-31-2024 07:57 AM - edited 07-31-2024 07:57 AM
It's not SIP protecting standard apps these days, it's that they're located on the signed system volume (https://support.apple.com/guide/security/signed-system-volume-security-secd698747c9/web) which can't be modified even if SIP were disabled.
07-31-2024 02:55 AM - edited 07-31-2024 02:56 AM
No. They are baked into the OS.
Posted on 07-31-2024 04:26 AM
Would using Jamf to restrict the apps from opening work?
Once someone opens it, you can prompt a message, and then Jamf will notify you who or which Mac opened one of these apps.
Posted on 07-31-2024 04:55 AM
What @jamf-42 and @obi-k said. You _can_ remove the icons for those apps from the Dock using the Dock management capabilities of Jamf Pro, or with dockutil if you prefer the scripted approach to managing Dock items. That does nothing to prevent them from being run, but at least they'd be somewhat less visible.
Posted on 07-31-2024 05:02 AM
Yes I have removed the items from dock. This functionality is working fine. Also blocked applications as when user try to access it shows custom msg. I was mainly looking for uninstall default application which I guess it not possible in Mac.
Posted on 07-31-2024 05:03 AM
Many of your preinstalled Applications are SIP protected, which means you cannot rename (hide), move or delete them. You can remove them from the Dock with a policy, and you can create a software restriction to force close them with a message when a user attempts to launch the app. For the non-SIP protected applications such as iWork, you can just delete them.
07-31-2024 07:57 AM - edited 07-31-2024 07:57 AM
It's not SIP protecting standard apps these days, it's that they're located on the signed system volume (https://support.apple.com/guide/security/signed-system-volume-security-secd698747c9/web) which can't be modified even if SIP were disabled.