Find My Mac + Activation Lock on Catalina

Alyoung
New Contributor III

Submitted this as a ticket to Jamf, but wanted to submit this to the communicate it to the community to see if anyone else has come up with something.



I have recently read through the Jamf Nation Article here: https://www.jamf.com/jamf-nation/discussions/33973/managing-find-my-mac-activation-lockon-catalina
As well as been made aware of a planned integration per: https://www.jamf.com/jamf-nation/feature-requests/8673/macos-10-15-activation-lock-bypass

My questions are:
Is there currently any status update on the planned integration of bypassing Activation Lock on macOS Catalina.
And if you are unable to provide a status update, is there a supported/recommended method from Jamf on how organizations who want to effectively disable Activation Lock on deployed Macs, can go about doing so without relying on the Users to do so? There does not seem to be a way or command to force Find My Mac to turn off if it's already enabled on a Mac. Short of asking users themselves to go into System Preferences and disabling Find My Mac, is there any automated alternative process?

With Find My Mac on, being able to easily and quickly wipe and reload machines that were signed in to a user's personal Apple ID will become a pain for many organizations.

I saw word that Apple is working on this, but there seems to be no updates or progress.
Any input would be helpful. Thank you for your time.

7 REPLIES 7

colorenz
Contributor

Hi, did you find a way to disable it before it activated? I tried a Profile and some Jamf Config with no luck....

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>allowCloudFMM</key> <false/> <key>allowFindMyDevice</key> <false/> <key>allowFindMyFriends</key> <false/> </dict> </plist>
QuotedText

colorenz
Contributor

Ok found a way

com.apple.icloud.managed.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict> <key>DisableFMMiCloudSetting</key> <true/>
</dict>
</plist>

Popoola
New Contributor

@colorenz , new to the jamf pro world. Doing some research on the issue with Catalina and Activation Lock. Looking to figure out a way to push custom settings to all macs to disable the sign in to icloud pane. Does the code above help with that ?

colorenz
Contributor

yes that would help..

mhasman
Valued Contributor

@colorenz Hello! Did you find the solution to disable Find My Mac? I tested CP above, not working for me...

dmccluskey
Contributor

dict> <key>DisableFMMiCloudSetting</key> <true/>

Does work but it has to be applied before icloud log in. If already logged into icloud then its to late.

mhasman
Valued Contributor

Thank you!