Disable Profiles pane in Ventura

MacJunior
Contributor III

Hey everyone, 

 

Is there a way to disable the Profiles pane in Ventura macOS? I don't want non-DEP Mac users to mess around with it and remove the MDM profile.

Thoughts?

 

 

1 ACCEPTED SOLUTION

AJPinto
Honored Contributor II

You cant. 

 

Apple is in the middle of replacing the preference panes, and General was the first to be replaced. There is no way to restrict General or anything within General. The only way to prevent a MDM profile from being removed is to enroll using Automated Device Enrollment. This is deliberate and per Apples design.

 

You can use Apple Configurator to Add Macs to Apple School Manager or Apple Business Manager during macOS Setup.

 

 

Managing Enrollment and Setup Assistant — Automated Device Enrollment

 

Automated Device Enrollment During Setup

To use Automated Device Enrollment during setup, assign devices to your MDM solution in Apple Business Manager, Apple Business Essentials, or Apple School Manager and configure them to enroll during setup. This configuration allows you to decide which Setup Assistant panes users see during device setup.

Tip

In your MDM solution, confirm that an enrollment profile is associated with the serial number of an assigned device.

After assigning devices to your MDM solution, you can manage important enrollment tasks, including the following:

  • Preventing unenrollment so users can’t unenroll a supervised device. On Mac computers, this setting prevents unenrollment from both System Settings and the Profiles command-line tool.

 


 

Understanding Device Enrollment — User Enrollment

 

When a user removes an enrollment profile, all configuration profiles, their settings, and Managed Apps based on that enrollment profile are removed with it. If the user doesn’t install a profile within 8 minutes of downloading it, it’s automatically deleted.

 

---

 

If a user removes the enrollment profile, all the items that the MDM solution installed, configured, and put in place are removed from the device.

 


 

 

 

 

 

Add devices from Apple Configurator to Apple Business Manager - Apple Support

Apple Configurator User Guide - Apple Support

 

Add a new Mac

If you’ve purchased a new Mac and haven’t yet started it up, you can begin.

  1. If you’re adding a Mac portable, plug the Mac into a power source so it doesn’t go to sleep during the process.

  2. If the Mac is connecting to the internet using Ethernet, plug in all necessary cables and adapters.

  3. Start up the Mac.

  4. Select the language in Setup Assistant, click Continue, then stop when you see the Country or Region pane.

    Note: You must restart the Mac if you go past the Country or Region pane.

  5. Bring your iPhone close to the Mac, then do one of the following:

    • Scan the image that appears in Setup Assistant.

    • Click Pair Manually in the lower-left corner of the Setup Assistant, then tap Manual Pairing in Apple Configurator and enter the six-digit code that appears.

  6. Wait for the process to complete, then click Shut Down to turn off the Mac.

    Important: If you want the Mac to enroll in MDM, don’t restart the Mac until you complete the task “Assign an iPhone, iPad, or Mac to an MDM server.”

 


 

View solution in original post

2 REPLIES 2

AJPinto
Honored Contributor II

You cant. 

 

Apple is in the middle of replacing the preference panes, and General was the first to be replaced. There is no way to restrict General or anything within General. The only way to prevent a MDM profile from being removed is to enroll using Automated Device Enrollment. This is deliberate and per Apples design.

 

You can use Apple Configurator to Add Macs to Apple School Manager or Apple Business Manager during macOS Setup.

 

 

Managing Enrollment and Setup Assistant — Automated Device Enrollment

 

Automated Device Enrollment During Setup

To use Automated Device Enrollment during setup, assign devices to your MDM solution in Apple Business Manager, Apple Business Essentials, or Apple School Manager and configure them to enroll during setup. This configuration allows you to decide which Setup Assistant panes users see during device setup.

Tip

In your MDM solution, confirm that an enrollment profile is associated with the serial number of an assigned device.

After assigning devices to your MDM solution, you can manage important enrollment tasks, including the following:

  • Preventing unenrollment so users can’t unenroll a supervised device. On Mac computers, this setting prevents unenrollment from both System Settings and the Profiles command-line tool.

 


 

Understanding Device Enrollment — User Enrollment

 

When a user removes an enrollment profile, all configuration profiles, their settings, and Managed Apps based on that enrollment profile are removed with it. If the user doesn’t install a profile within 8 minutes of downloading it, it’s automatically deleted.

 

---

 

If a user removes the enrollment profile, all the items that the MDM solution installed, configured, and put in place are removed from the device.

 


 

 

 

 

 

Add devices from Apple Configurator to Apple Business Manager - Apple Support

Apple Configurator User Guide - Apple Support

 

Add a new Mac

If you’ve purchased a new Mac and haven’t yet started it up, you can begin.

  1. If you’re adding a Mac portable, plug the Mac into a power source so it doesn’t go to sleep during the process.

  2. If the Mac is connecting to the internet using Ethernet, plug in all necessary cables and adapters.

  3. Start up the Mac.

  4. Select the language in Setup Assistant, click Continue, then stop when you see the Country or Region pane.

    Note: You must restart the Mac if you go past the Country or Region pane.

  5. Bring your iPhone close to the Mac, then do one of the following:

    • Scan the image that appears in Setup Assistant.

    • Click Pair Manually in the lower-left corner of the Setup Assistant, then tap Manual Pairing in Apple Configurator and enter the six-digit code that appears.

  6. Wait for the process to complete, then click Shut Down to turn off the Mac.

    Important: If you want the Mac to enroll in MDM, don’t restart the Mac until you complete the task “Assign an iPhone, iPad, or Mac to an MDM server.”

 


 

melvinp
New Contributor

Is there any document from Apple which says that Profiles Pane cannot be disabled from macOS Ventura?

Can you share the link?