Find My Mac + Activation Lock on Catalina

[Alyoung]

Submitted this as a ticket to Jamf, but wanted to submit this to the communicate it to the community to see if anyone else has come up with something.

---

I have recently read through the Jamf Nation Article here: https://www.jamf.com/jamf-nation/discussions/33973/managing-find-my-mac-activation-lockon-catalina
As well as been made aware of a planned integration per: https://www.jamf.com/jamf-nation/feature-requests/8673/macos-10-15-activation-lock-bypass

My questions are:
Is there currently any status update on the planned integration of bypassing Activation Lock on macOS Catalina.
And if you are unable to provide a status update, is there a supported/recommended method from Jamf on how organizations who want to effectively disable Activation Lock on deployed Macs, can go about doing so without relying on the Users to do so? There does not seem to be a way or command to force Find My Mac to turn off if it's already enabled on a Mac. Short of asking users themselves to go into System Preferences and disabling Find My Mac, is there any automated alternative process?

With Find My Mac on, being able to easily and quickly wipe and reload machines that were signed in to a user's personal Apple ID will become a pain for many organizations.

I saw word that Apple is working on this, but there seems to be no updates or progress.
Any input would be helpful. Thank you for your time.

[colorenz]

Hi, did you find a way to disable it before it activated? I tried a Profile and some Jamf Config with no luck....

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>allowCloudFMM</key> <false/> <key>allowFindMyDevice</key> <false/> <key>allowFindMyFriends</key> <false/> </dict> </plist>

QuotedText

[colorenz]

Ok found a way

com.apple.icloud.managed.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict> <key>DisableFMMiCloudSetting</key> <true/>
</dict>
</plist>

[Popoola]

@colorenz , new to the jamf pro world. Doing some research on the issue with Catalina and Activation Lock. Looking to figure out a way to push custom settings to all macs to disable the sign in to icloud pane. Does the code above help with that ?

[colorenz]

yes that would help..

[mhasman]

@colorenz Hello! Did you find the solution to disable Find My Mac? I tested CP above, not working for me...

[dmccluskey]

dict> <key>DisableFMMiCloudSetting</key> <true/>

Does work but it has to be applied before icloud log in. If already logged into icloud then its to late.

[mhasman]

Thank you!