Posted on 02-01-2023 01:08 AM
Hey everyone,
Is there a way to disable the Profiles pane in Ventura macOS? I don't want non-DEP Mac users to mess around with it and remove the MDM profile.
Thoughts?
Solved! Go to Solution.
02-01-2023 04:52 AM - edited 02-01-2023 04:59 AM
You cant.
Apple is in the middle of replacing the preference panes, and General was the first to be replaced. There is no way to restrict General or anything within General. The only way to prevent a MDM profile from being removed is to enroll using Automated Device Enrollment. This is deliberate and per Apples design.
You can use Apple Configurator to Add Macs to Apple School Manager or Apple Business Manager during macOS Setup.
Managing Enrollment and Setup Assistant — Automated Device Enrollment
Automated Device Enrollment During Setup
To use Automated Device Enrollment during setup, assign devices to your MDM solution in Apple Business Manager, Apple Business Essentials, or Apple School Manager and configure them to enroll during setup. This configuration allows you to decide which Setup Assistant panes users see during device setup.
Tip
In your MDM solution, confirm that an enrollment profile is associated with the serial number of an assigned device.
After assigning devices to your MDM solution, you can manage important enrollment tasks, including the following:
Preventing unenrollment so users can’t unenroll a supervised device. On Mac computers, this setting prevents unenrollment from both System Settings and the Profiles command-line tool.
Understanding Device Enrollment — User Enrollment
When a user removes an enrollment profile, all configuration profiles, their settings, and Managed Apps based on that enrollment profile are removed with it. If the user doesn’t install a profile within 8 minutes of downloading it, it’s automatically deleted.
---
If a user removes the enrollment profile, all the items that the MDM solution installed, configured, and put in place are removed from the device.
Add devices from Apple Configurator to Apple Business Manager - Apple Support
Apple Configurator User Guide - Apple Support
Add a new Mac
If you’ve purchased a new Mac and haven’t yet started it up, you can begin.
If you’re adding a Mac portable, plug the Mac into a power source so it doesn’t go to sleep during the process.
If the Mac is connecting to the internet using Ethernet, plug in all necessary cables and adapters.
Start up the Mac.
Select the language in Setup Assistant, click Continue, then stop when you see the Country or Region pane.
Note: You must restart the Mac if you go past the Country or Region pane.
Bring your iPhone close to the Mac, then do one of the following:
Scan the image that appears in Setup Assistant.
Click Pair Manually in the lower-left corner of the Setup Assistant, then tap Manual Pairing in Apple Configurator and enter the six-digit code that appears.
Wait for the process to complete, then click Shut Down to turn off the Mac.
Important: If you want the Mac to enroll in MDM, don’t restart the Mac until you complete the task “Assign an iPhone, iPad, or Mac to an MDM server.”
02-01-2023 04:52 AM - edited 02-01-2023 04:59 AM
You cant.
Apple is in the middle of replacing the preference panes, and General was the first to be replaced. There is no way to restrict General or anything within General. The only way to prevent a MDM profile from being removed is to enroll using Automated Device Enrollment. This is deliberate and per Apples design.
You can use Apple Configurator to Add Macs to Apple School Manager or Apple Business Manager during macOS Setup.
Managing Enrollment and Setup Assistant — Automated Device Enrollment
Automated Device Enrollment During Setup
To use Automated Device Enrollment during setup, assign devices to your MDM solution in Apple Business Manager, Apple Business Essentials, or Apple School Manager and configure them to enroll during setup. This configuration allows you to decide which Setup Assistant panes users see during device setup.
Tip
In your MDM solution, confirm that an enrollment profile is associated with the serial number of an assigned device.
After assigning devices to your MDM solution, you can manage important enrollment tasks, including the following:
Preventing unenrollment so users can’t unenroll a supervised device. On Mac computers, this setting prevents unenrollment from both System Settings and the Profiles command-line tool.
Understanding Device Enrollment — User Enrollment
When a user removes an enrollment profile, all configuration profiles, their settings, and Managed Apps based on that enrollment profile are removed with it. If the user doesn’t install a profile within 8 minutes of downloading it, it’s automatically deleted.
---
If a user removes the enrollment profile, all the items that the MDM solution installed, configured, and put in place are removed from the device.
Add devices from Apple Configurator to Apple Business Manager - Apple Support
Apple Configurator User Guide - Apple Support
Add a new Mac
If you’ve purchased a new Mac and haven’t yet started it up, you can begin.
If you’re adding a Mac portable, plug the Mac into a power source so it doesn’t go to sleep during the process.
If the Mac is connecting to the internet using Ethernet, plug in all necessary cables and adapters.
Start up the Mac.
Select the language in Setup Assistant, click Continue, then stop when you see the Country or Region pane.
Note: You must restart the Mac if you go past the Country or Region pane.
Bring your iPhone close to the Mac, then do one of the following:
Scan the image that appears in Setup Assistant.
Click Pair Manually in the lower-left corner of the Setup Assistant, then tap Manual Pairing in Apple Configurator and enter the six-digit code that appears.
Wait for the process to complete, then click Shut Down to turn off the Mac.
Important: If you want the Mac to enroll in MDM, don’t restart the Mac until you complete the task “Assign an iPhone, iPad, or Mac to an MDM server.”
Posted on 07-10-2023 10:21 AM
Is there any document from Apple which says that Profiles Pane cannot be disabled from macOS Ventura?
Can you share the link?