Posted on 08-18-2024 06:10 PM
Is there a way to force set the "Listen for" setting under Siri settings to Off?
We have disabled the assistant overall, as well as applied a config profile blocking the use of Siri. However, when disabling the assistant via a plist edit, if the "Listen for" setting was set to anything other than Off when this change took place, the user now gets a popup stating "You do not have permission to use Siri" whenever they say something out loud that sounds remotely similar to "Siri".
Posted on 08-18-2024 10:27 PM
A configuration key to edit the "Listen for" option does not exist. The only option available seems to be running a script to disable the Siri process entirely. I found a post for macOS Sierra, where the last reply was several years ago, and the post itself is seven years old. It provides some guidance on disabling the Siri Launch Agent. Note that System Integrity Protection must be disabled for this to work.
Posted on 08-19-2024 06:22 AM
https://github.com/usnistgov/macos_security/blob/sonoma/rules/system_settings/system_settings_siri_l...
Apply a configuration profile with this domain and payload.
Posted on 08-19-2024 06:57 AM
I managed to create a profile to disable "Listen For" using that as a reference. I apologise for my earlier response, I spent a considerable amount of time searching for the key but couldn't locate it. However, I realised that to disable "Listen For", the correct key is com.apple.siri, not com.apple.assistant. I've attached the example profile I created below, which successfully disables both Siri and "Listen For." Again, I apologise for the incorrect response @matt-hunt.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>Assistant Enabled</key>
<false/>
<key>PayloadDisplayName</key>
<string>Assistant</string>
<key>PayloadIdentifier</key>
<string>com.apple.assistant.support.DDD77940-6BEA-47AC-A55C-D2106395736E</string>
<key>PayloadType</key>
<string>com.apple.assistant.support</string>
<key>PayloadUUID</key>
<string>DDD77940-6BEA-47AC-A55C-D2106395736E</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
<dict>
<key>Assistant Enabled</key>
<false/>
<key>PayloadDisplayName</key>
<string>Settings</string>
<key>PayloadIdentifier</key>
<string>com.apple.siri</string>
<key>PayloadType</key>
<string>com.apple.siri</string>
<key>PayloadUUID</key>
<string>185317D3-BB90-486B-9C05-C97E8185C5C8</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>VoiceTriggerUserEnabled</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Disable Siri and Apple Assistant</string>
<key>PayloadDisplayName</key>
<string>Disable Siri and Apple Assistant</string>
<key>PayloadIdentifier</key>
<string>com.testorg.siri</string>
<key>PayloadOrganization</key>
<string>Test Org</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>AB4EBADA-6FEB-4956-B3A3-A6C3D4FFCD45</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
Posted on 08-20-2024 05:21 AM
You don't even need to do this. Just upload this to “Application & Custom Settings” > Upload with the domain com.apple.Siri:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>VoiceTriggerUserEnabled</key>
<false/>
</dict>
</plist>
Posted on 08-27-2024 02:52 PM
After I have pushed the profile to affected computers, "Listen for" is displayed as disabled in the GUI.
Unfortunately, the Macs still respond to a “Hey Siri” and the “You do not have permission to use Siri” popup appears.
Posted on 10-02-2024 10:51 AM
Same here.